8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0}) 09:14:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) socket$netlink(0x10, 0x3, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_raw(r2, &(0x7f0000000b40)={&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/141, 0x8d}], 0xa, &(0x7f0000000a80)=""/183, 0xb7}, 0x2040) fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:14:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2da], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x18700000, 0x0, 0x0}) 09:14:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0}) [ 1469.804797][T24811] usb usb5: usbfs: process 24811 (syz-executor.5) did not claim interface 0 before use [ 1469.814135][T24808] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1469.817294][T24811] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1469.832335][T24815] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1469.840191][T24816] usb usb5: usbfs: process 24816 (syz-executor.4) did not claim interface 0 before use 09:14:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1469.878321][T24824] usb usb5: usbfs: process 24824 (syz-executor.4) did not claim interface 0 before use [ 1469.889796][T24824] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1469.897854][T24825] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1469.908346][T24827] usb usb5: usbfs: process 24827 (syz-executor.5) did not claim interface 0 before use [ 1469.936730][T24827] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1469.944217][T24829] usb usb5: usbfs: process 24829 (syz-executor.4) did not claim interface 0 before use 09:14:57 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:14:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2ea], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x19700000, 0x0, 0x0}) 09:14:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) socket$netlink(0x10, 0x3, 0x9) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_raw(r2, &(0x7f0000000b40)={&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/141, 0x8d}], 0xa, &(0x7f0000000a80)=""/183, 0xb7}, 0x2040) (async, rerun: 32) fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 32) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:14:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2f2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x25000000, 0x0, 0x0}) [ 1470.662560][T24840] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1470.663477][T24841] usb usb5: usbfs: process 24841 (syz-executor.4) did not claim interface 0 before use [ 1470.684396][T24841] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1470.691799][T24839] usb usb5: usbfs: process 24839 (syz-executor.5) did not claim interface 0 before use 09:14:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0}) [ 1470.728506][T24848] usb usb5: usbfs: process 24848 (syz-executor.5) did not claim interface 0 before use [ 1470.739717][T24848] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1470.740709][T24849] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1470.747891][T24853] usb usb5: usbfs: process 24853 (syz-executor.4) did not claim interface 0 before use [ 1470.794956][T24858] usb usb5: usbfs: process 24858 (syz-executor.5) did not claim interface 0 before use [ 1470.804820][T24858] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:14:58 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:14:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x300], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) 09:14:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0}) 09:14:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) socket$netlink(0x10, 0x3, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_raw(r2, &(0x7f0000000b40)={&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/141, 0x8d}], 0xa, &(0x7f0000000a80)=""/183, 0xb7}, 0x2040) fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 64) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (rerun: 64) 09:14:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0}) 09:14:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0}) 09:14:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x308], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1471.540121][T24868] usb usb5: usbfs: process 24868 (syz-executor.5) did not claim interface 0 before use [ 1471.553298][T24870] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1471.565958][T24868] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1471.573280][T24871] usb usb5: usbfs: process 24871 (syz-executor.4) did not claim interface 0 before use 09:14:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x31c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x9}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1471.610597][T24881] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1471.621912][T24884] usb usb5: usbfs: process 24884 (syz-executor.4) did not claim interface 0 before use [ 1471.635390][T24887] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1471.650447][T24884] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1471.660533][T24885] usb usb5: usbfs: process 24885 (syz-executor.5) did not claim interface 0 before use 09:14:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8) syz_open_pts(r1, 0x101700) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:14:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x320], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0}) 09:14:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0}) 09:14:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xa}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:59 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:14:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x322], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xb}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x330], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:14:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:14:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0}) [ 1472.407765][T24897] usb usb5: usbfs: process 24897 (syz-executor.5) did not claim interface 0 before use [ 1472.439145][T24897] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1472.446920][T24901] usb usb5: usbfs: process 24901 (syz-executor.4) did not claim interface 0 before use 09:14:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0}) [ 1472.509879][T24915] usb usb5: usbfs: process 24915 (syz-executor.5) did not claim interface 0 before use [ 1472.519681][T24915] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1472.527308][T24916] usb usb5: usbfs: process 24916 (syz-executor.4) did not claim interface 0 before use [ 1472.540736][T24916] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:00 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8) (async) r1 = signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8) syz_open_pts(r1, 0x101700) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x338], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0}) 09:15:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0}) 09:15:00 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:15:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xe}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x33a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0}) 09:15:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0}) [ 1473.242702][T24919] usb usb5: usbfs: process 24919 (syz-executor.5) did not claim interface 0 before use [ 1473.259855][T24919] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1473.267485][T24924] usb usb5: usbfs: process 24924 (syz-executor.4) did not claim interface 0 before use 09:15:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x340], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}) [ 1473.324155][T24936] usb usb5: usbfs: process 24936 (syz-executor.4) did not claim interface 0 before use [ 1473.346317][T24936] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1473.354470][T24939] usb usb5: usbfs: process 24939 (syz-executor.5) did not claim interface 0 before use [ 1473.366154][T24939] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1473.391176][T24944] usb usb5: usbfs: process 24944 (syz-executor.4) did not claim interface 0 before use [ 1473.401072][T24944] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x10}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x342], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0}) 09:15:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0}) 09:15:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8) syz_open_pts(r1, 0x101700) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8) (async) syz_open_pts(r1, 0x101700) (async) syz_open_pts(r0, 0x0) (async) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (async) 09:15:01 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:15:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x35a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1474.108768][T24948] xt_check_match: 6 callbacks suppressed [ 1474.108854][T24948] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1474.136819][T24952] usb usb5: usbfs: process 24952 (syz-executor.4) did not claim interface 0 before use [ 1474.145180][T24956] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x11}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x366], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0}) [ 1474.164585][T24952] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1474.173883][T24957] usb usb5: usbfs: process 24957 (syz-executor.5) did not claim interface 0 before use 09:15:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x12}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) 09:15:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x20008855) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 1474.212862][T24974] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1474.219057][T24976] usb usb5: usbfs: process 24976 (syz-executor.4) did not claim interface 0 before use [ 1474.248316][T24976] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x372], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x25}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}) 09:15:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0}) [ 1474.255629][T24979] usb usb5: usbfs: process 24979 (syz-executor.5) did not claim interface 0 before use [ 1474.269898][T24984] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1474.306671][T24990] usb usb5: usbfs: process 24990 (syz-executor.4) did not claim interface 0 before use [ 1474.323468][T24990] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1474.330790][T24991] usb usb5: usbfs: process 24991 (syz-executor.5) did not claim interface 0 before use 09:15:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x48}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x37a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0}) 09:15:02 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:15:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0}) 09:15:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x382], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4c}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1475.010027][T24999] usb usb5: usbfs: process 24999 (syz-executor.4) did not claim interface 0 before use [ 1475.013730][T24998] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1475.030463][T24999] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1475.037901][T25002] usb usb5: usbfs: process 25002 (syz-executor.5) did not claim interface 0 before use 09:15:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (rerun: 64) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x20008855) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x38a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}) 09:15:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1475.050367][T25004] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x68}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6c}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0}) [ 1475.098939][T25015] usb usb5: usbfs: process 25015 (syz-executor.5) did not claim interface 0 before use [ 1475.110475][T25009] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1475.111204][T25015] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1475.129688][T25018] usb usb5: usbfs: process 25018 (syz-executor.4) did not claim interface 0 before use [ 1475.170682][T25027] usb usb5: usbfs: process 25027 (syz-executor.4) did not claim interface 0 before use [ 1475.180555][T25027] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:03 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:15:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x38e], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x74}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) 09:15:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0}) 09:15:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x20008855) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7a}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x39a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}) [ 1475.863036][T25034] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1475.864997][T25032] usb usb5: usbfs: process 25032 (syz-executor.4) did not claim interface 0 before use [ 1475.884657][T25032] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x39c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) [ 1475.913406][T25041] usb usb5: usbfs: process 25041 (syz-executor.5) did not claim interface 0 before use [ 1475.920456][T25043] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1475.944962][T25041] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1475.953185][T25048] usb usb5: usbfs: process 25048 (syz-executor.4) did not claim interface 0 before use [ 1475.976610][T25052] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1475.982734][T25054] usb usb5: usbfs: process 25054 (syz-executor.5) did not claim interface 0 before use [ 1475.997210][T25054] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:03 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) 09:15:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x102}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r2 = syz_open_pts(r1, 0xe40c2) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3a4], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0}) 09:15:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}) 09:15:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x120}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3aa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1476.723178][T25063] usb usb5: usbfs: process 25063 (syz-executor.5) did not claim interface 0 before use [ 1476.758505][T25063] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3ba], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x123}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0}) 09:15:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3bc], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1476.765768][T25065] usb usb5: usbfs: process 25065 (syz-executor.4) did not claim interface 0 before use [ 1476.833427][T25080] usb usb5: usbfs: process 25080 (syz-executor.4) did not claim interface 0 before use 09:15:04 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) 09:15:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3c2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0}) 09:15:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r2 = syz_open_pts(r1, 0xe40c2) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0}) 09:15:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x203}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3c8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3cc], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3ce], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}) [ 1477.583950][T25089] usb usb5: usbfs: process 25089 (syz-executor.4) did not claim interface 0 before use [ 1477.615641][T25089] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1477.624215][T25087] usb usb5: usbfs: process 25087 (syz-executor.5) did not claim interface 0 before use 09:15:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3d0], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1477.641652][T25087] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1477.657315][T25105] usb usb5: usbfs: process 25105 (syz-executor.4) did not claim interface 0 before use 09:15:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0}) 09:15:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0}) 09:15:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3d6], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:05 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) 09:15:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x302}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) r2 = syz_open_pts(r1, 0xe40c2) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0}) 09:15:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x320}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3dc], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1478.414996][T25113] usb usb5: usbfs: process 25113 (syz-executor.5) did not claim interface 0 before use [ 1478.424775][T25113] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1478.431969][T25112] usb usb5: usbfs: process 25112 (syz-executor.4) did not claim interface 0 before use 09:15:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x323}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3de], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0}) [ 1478.483790][T25126] usb usb5: usbfs: process 25126 (syz-executor.4) did not claim interface 0 before use [ 1478.551015][T25136] usb usb5: usbfs: process 25136 (syz-executor.4) did not claim interface 0 before use 09:15:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3e8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}) [ 1478.749251][T25143] usb usb5: usbfs: process 25143 (syz-executor.4) did not claim interface 0 before use [ 1478.759106][T25143] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:06 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) 09:15:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0}) 09:15:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x600}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3ea], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0}) 09:15:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = io_uring_setup(0x76ee, &(0x7f0000001640)={0x0, 0xd71d, 0x400, 0x1, 0x365}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) write$snapshot(r4, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) write$snapshot(r5, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) write$snapshot(r6, 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) write$snapshot(r7, 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) write$snapshot(r8, 0x0, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r9, 0x3305) write$snapshot(r9, 0x0, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000016c0), 0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="6eab7c49361aad53335190370714d03c67cf3a11e1de98883f05c68ad462db3974fb89900c10c75eb383dd4e", 0x2c}, {&(0x7f00000001c0)="1122be70019ee384a7781864a3c36a92289851c8ddb5ef42ebfa80214a0a476362b1176a37865fb998ab25b8ef05a0f2e44a2179fc08162dbb5db1d5216a64b9ab39eb0df9279bd71dfd4f6a302b", 0x4e}], 0x2, &(0x7f0000000300)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}], 0x30, 0x20004000}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000003c0)="b51c6ea4a353cbbbe1dd660641aa63ce6398b66e59b556afee57187a42c5b6fa047dd47dac04696d4a945539bbf35eb6e3ede2b71bf44ec781e18b02037a88e162520b58811e153b7c130d017bec9e70a3de97bb3544dbf66996f080f3b041911cb7ae758f638d095b21b1f589f4998d240da375871fc5d4a5e8ec23e97b54fcf2236af4e2cfaed50b13408aaeb7d3c4c1aa7dd0532ed03da4bf7ee7020e1c76aa42", 0xa2}, {&(0x7f0000000480)="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", 0x1000}], 0x2, 0x0, 0x0, 0x41}}, {{&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001540)="09380d94b1183ef651b0b1edd43f9fe158733266709d377f4442e098cbb93da2aaca1ce4ca8f3909b72f0168bc97d830eef26b49501d02213278172fe8772476f6f86b67b54d23158192e3f9517817dc6d7ea45d748b5de034c797a90e2220f9fcb8218b4a909f78d089050dfa0f7221cb8acb92355522f116f0eb49cf501d35b90864c67afe4947d2280f033bb9d4a276099576beaa62d4d74153783c26", 0x9e}], 0x1, &(0x7f0000001700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r0, r2, r2, r5, r6, r1]}}, @rights={{0x30, 0x1, 0x1, [r7, r8, r1, r2, r9, r0, r10, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}], 0x88, 0x20000004}}], 0x3, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x700}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x900}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x2e75, 0x0, 0x0, 0x0, 0x0}) 09:15:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3ec], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0}) [ 1479.323750][T25150] usb usb5: usbfs: process 25150 (syz-executor.5) did not claim interface 0 before use [ 1479.334434][T25149] xt_check_match: 13 callbacks suppressed [ 1479.334449][T25149] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1479.340250][T25150] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1479.360440][T25152] usb usb5: usbfs: process 25152 (syz-executor.4) did not claim interface 0 before use 09:15:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3ee], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1479.400102][T25162] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1479.412413][T25163] usb usb5: usbfs: process 25163 (syz-executor.5) did not claim interface 0 before use [ 1479.435934][T25163] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1479.436811][T25169] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1479.453874][T25164] usb usb5: usbfs: process 25164 (syz-executor.4) did not claim interface 0 before use 09:15:07 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180), 0x0) 09:15:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x3075, 0x0, 0x0, 0x0, 0x0}) 09:15:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3f2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xa00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0}) 09:15:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) r3 = io_uring_setup(0x76ee, &(0x7f0000001640)={0x0, 0xd71d, 0x400, 0x1, 0x365}) (async, rerun: 32) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) write$snapshot(r4, 0x0, 0x0) (async, rerun: 32) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (rerun: 32) ioctl$SNAPSHOT_FREE(r5, 0x3305) (async) write$snapshot(r5, 0x0, 0x0) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) write$snapshot(r6, 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) (async, rerun: 32) write$snapshot(r7, 0x0, 0x0) (rerun: 32) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) (async) write$snapshot(r8, 0x0, 0x0) (async) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r9, 0x3305) write$snapshot(r9, 0x0, 0x0) (async, rerun: 64) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000016c0), 0x80000) (rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="6eab7c49361aad53335190370714d03c67cf3a11e1de98883f05c68ad462db3974fb89900c10c75eb383dd4e", 0x2c}, {&(0x7f00000001c0)="1122be70019ee384a7781864a3c36a92289851c8ddb5ef42ebfa80214a0a476362b1176a37865fb998ab25b8ef05a0f2e44a2179fc08162dbb5db1d5216a64b9ab39eb0df9279bd71dfd4f6a302b", 0x4e}], 0x2, &(0x7f0000000300)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}], 0x30, 0x20004000}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000003c0)="b51c6ea4a353cbbbe1dd660641aa63ce6398b66e59b556afee57187a42c5b6fa047dd47dac04696d4a945539bbf35eb6e3ede2b71bf44ec781e18b02037a88e162520b58811e153b7c130d017bec9e70a3de97bb3544dbf66996f080f3b041911cb7ae758f638d095b21b1f589f4998d240da375871fc5d4a5e8ec23e97b54fcf2236af4e2cfaed50b13408aaeb7d3c4c1aa7dd0532ed03da4bf7ee7020e1c76aa42", 0xa2}, {&(0x7f0000000480)="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", 0x1000}], 0x2, 0x0, 0x0, 0x41}}, {{&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001540)="09380d94b1183ef651b0b1edd43f9fe158733266709d377f4442e098cbb93da2aaca1ce4ca8f3909b72f0168bc97d830eef26b49501d02213278172fe8772476f6f86b67b54d23158192e3f9517817dc6d7ea45d748b5de034c797a90e2220f9fcb8218b4a909f78d089050dfa0f7221cb8acb92355522f116f0eb49cf501d35b90864c67afe4947d2280f033bb9d4a276099576beaa62d4d74153783c26", 0x9e}], 0x1, &(0x7f0000001700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r0, r2, r2, r5, r6, r1]}}, @rights={{0x30, 0x1, 0x1, [r7, r8, r1, r2, r9, r0, r10, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}], 0x88, 0x20000004}}], 0x3, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xb00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3f6], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1480.190166][T25177] usb usb5: usbfs: process 25177 (syz-executor.4) did not claim interface 0 before use [ 1480.200367][T25175] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1480.204365][T25177] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1480.224027][T25179] usb usb5: usbfs: process 25179 (syz-executor.5) did not claim interface 0 before use 09:15:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0}) 09:15:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xc00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0}) 09:15:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3f8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1480.254816][T25189] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1480.293831][T25196] usb usb5: usbfs: process 25196 (syz-executor.4) did not claim interface 0 before use [ 1480.307928][T25200] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1480.318444][T25196] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1480.333532][T25198] usb usb5: usbfs: process 25198 (syz-executor.5) did not claim interface 0 before use [ 1480.346166][T25198] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0}) 09:15:08 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180), 0x0) 09:15:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xc20}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r3 = io_uring_setup(0x76ee, &(0x7f0000001640)={0x0, 0xd71d, 0x400, 0x1, 0x365}) (async) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) (async) write$snapshot(r4, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) (async) write$snapshot(r5, 0x0, 0x0) (async, rerun: 32) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (rerun: 32) ioctl$SNAPSHOT_FREE(r6, 0x3305) write$snapshot(r6, 0x0, 0x0) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) write$snapshot(r7, 0x0, 0x0) (async) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) (async) write$snapshot(r8, 0x0, 0x0) (async) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r9, 0x3305) write$snapshot(r9, 0x0, 0x0) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000016c0), 0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="6eab7c49361aad53335190370714d03c67cf3a11e1de98883f05c68ad462db3974fb89900c10c75eb383dd4e", 0x2c}, {&(0x7f00000001c0)="1122be70019ee384a7781864a3c36a92289851c8ddb5ef42ebfa80214a0a476362b1176a37865fb998ab25b8ef05a0f2e44a2179fc08162dbb5db1d5216a64b9ab39eb0df9279bd71dfd4f6a302b", 0x4e}], 0x2, &(0x7f0000000300)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}], 0x30, 0x20004000}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000003c0)="b51c6ea4a353cbbbe1dd660641aa63ce6398b66e59b556afee57187a42c5b6fa047dd47dac04696d4a945539bbf35eb6e3ede2b71bf44ec781e18b02037a88e162520b58811e153b7c130d017bec9e70a3de97bb3544dbf66996f080f3b041911cb7ae758f638d095b21b1f589f4998d240da375871fc5d4a5e8ec23e97b54fcf2236af4e2cfaed50b13408aaeb7d3c4c1aa7dd0532ed03da4bf7ee7020e1c76aa42", 0xa2}, {&(0x7f0000000480)="a5dd87d12742c29cd4d97330c0456d68edee617fb7bf3e11667d0439b229abf218ec859eb9a3927a6c3d5d453be4b9f3620d6319c5efb3ea6510e9770920a590b790f14d8bd869399a968e3e1d21fabe350adef3cdd8a141b2c9698badbadb54ff0e8a8d3df4540754011dac021581252d0baa69167022902e371e0445beac8923770f89d941579e164cd898ab5c7f3a1425476658b57109740507f2e0d261e6221a7c7907bb970d00cb898b078f244c3b3e6d8f6d1bd160d9d7fd458bc24cb9a2daa59a98bd9aa81f55f5bae46a686522c6d652222821066ae1466aa2c720e7fcb87e865c01f9ec586aaaa918df79e8a6203c4adc95d85615ece55ce20af804038aabda0d65285766248843a2ab75b4079553f6742afc7ee9111f37bd521e5d110781ebd1653694d08769bad254cc555046354f3c11e795cbf1089e7fd1fb83a1463352d4fac6e630d018d83f3484cf89ef06c1dfa4dc4aaa217a51efb218291cabc888ad94278c5b3795de2e1c43b4084811aba253804611f74a0b7c2909be2f21080beacafd5c265b7791694fe0424d36ea6e8bc1eac8a9fa2bb9921c6c52f2cc435061a6e19d9c4a505792f10bbba65e08fa05d8636a76a380a5f9ab327817f61f4bf5745c7cc3a73a95fcfa1b010f51c9fdb21300605f1a5a738f61176dcf90116ba75ce3146521c4334c59e31436c3395f115f05747439cdfcb4716197fee29d5057de11c4f4858fc3f39e3f3ddffaf342cb8d58d899f74140f1173ad84210f075a769b4f11876352ddb33d93e22e5ad6ad7f44fb1e9cc7a8d25c6369c032651488fc7c09e6890b2b31b4f252954dfeaf2d1bcfcd402a67b5b95a4212aac11c12e04a241b0231d523b975d1a05187e2a8047eca58d095f714808da0e5ca08de7cb4f35ceec836e3c86ef361c6bcc923acdfb9db4636c10d281b20edf97d33f847647f5fb855e383948db8ddaa25cd0c0112802e8946706d5fd116e450aca31eb45ee59dfb76b934f83bb7ad16083c16036bc17058ab4e2ac7f53a8833e791edaa33e0ab216ac37b206d00e9c2c9216f669211965571a6d14a505ad40062fb23d411aa96d053ffec5d48cd9bd9cd66c710b6b293eea9cf2ca1a864057e11885958cff6536782e8fb225aa5a7d5d9e1962139dc9701fd25ee0d8f4fb1ad5f6a06c0a6bd0e0a71c9476936d9eafddbd40702edd681dd58a4eec95bd145429b3ffbaf857f91362f98bea1d060a5829bf0007355901212ac242550f8db6bb2c0d9969fbe67d817615731a439dd42f5fa2d5dc23dd36ca9add8c0cbb58ebbabdb2ffe50fc8c184e43385e812b637dd6987da00641a233fa5a7d88a29faf3b6f74d25596da5508e43ccfde4041955224e53dbdc8e996fa0f0aeb69fccacc43900818ccc4a00b9742be62b7416ce34ead175648d666429d25c11d7f145223c608ef8d666571003b701a26ac5a6961068e66437ad42197e14e3a8bfa4bf7fbf51d493f6b7667fc8a50292d687c614a1426732e18348a000c5959288034187c2c84ceeaf840a6f81ddd54097912d31d80f519930007d69704455e0e9912a04ce36adbf5a90c80dee2d125b1912e033fd523324a7418586b0d1ad5a3acbdc3441e29b39b075af9e0df239a1f86f304366f4dd12ba0440f0352f6a428f003f09d3703385f41e6ceb9dd4332a9040280b7d150e9c9df2b7cbc496878bafe07db6d7618a7a480805075cd462c3f913218715f9ce7677a6a15a4bdd97a33d46ecde28b1c2dc3aa62bc3675b245eeb3c8f02c8300693bb5ac7e8b51de03bb9ad2724aecbbd10fadad55b5faf30944a20cdd2fddfbd5fb8e78f5af8971e077767d715dc1b32184f7d9b9cf9357f76f8435f3a501fd496f32d747e84535ae53e56db6f98e0bc850d84c252521771cd448fd34f23ef5a62e519a523d5d9f743553c97da72de3e03d6721b27d6768354a6bd1d03c16a0c1a3165fbf14cd9c904263498208ade6ab9b93441ebbc28ff3c0c607636b19f81b49cc412790e2dc59782d0642b5e3ceb7e7ec47011d1dd4bffb8226dddb9b02d73f623fbd409735e811725fd3c5fa7c90e579549b0df268f1375cce7880f01208a827d6206288697a51809a1d842410668df738c1fdbc1f30bbd80e3c00e875397b95e83618d0139b16ba6947abd86e20679cb22896c99516524cb635e02175398115ff5f99b0556091e741ac189f52ce2b9268ddfe83b631cec7c812c372b6f0ef4de160a3de9e43616c5ef247350a060633d2d2ef2b039855954250f596a55201373e9eb25ae2849be8ab110b0b2e831c93c29a8dad67b6209fcd3a843584276b1198c993bb91f43f8653ddc5595fd03d298e5c3974e6b9f8ced483962f2114c3c01d442b151ba883f4de739fefd8d3038a6349456e46d5c29af023c3aafd51c7ffc2de05527be3590e3273c1367708804be30ea021bce7893f759fa8e93cb7050dc1bf9828c80cade5100296aaa3ad1ff321c70f962288f15484d07cd2054c16d2064c14e4604830bfc8ab631420c48b625492136c12cc9f193b21290cb237ff83097e61ff4250046a1823bbf8d929ba0176651cefec8501d40fb30ba586ba4885a80d8bd80dea062d85aa9ddf907aab420a17d666148cf72a5c7b8547ae45cbb2b26e24bd3ebf3328179d3db177a50fbe9cf499b564273698c5dafef6d12a01858972240f9def3c9e011afc4767092f34db585cfbb301886589f8dfb292cf13046176a16f134a9f6675ce1191e771fd0fe542659231eff17139d0b285960724adeca096d4e28c399c18a741a79b3ac8e9a230457d97b64f3ade7e8a62081a1eeffaf7cc3cb20f4ac2b18e4d9f94c84a591c8d72281c88d2a5588b2c8eb5ed79512ab2b9dbffaaa5f7974ab44b89fd286dd32359e9a45bda679da43675fb6026bb1fa5394944243efeed011b959d97a1542e0760daf079bcc2e29913ce0181419031e8fd865a3e15abf183d72c1c14b18147a5c99b08b9c21459969303191c00838822f7fa012b3760720843f37805d27ddb4937c9c3910bf96df7ceb2eaf8caff1e26b4ef16061e7844de6a41c50cbc7a5377f5ea315ca6f4b0d48db338465700958f36fb3f146dd767d13de9b8a8f2f5d740a1a50768efd1b77b64b6f3f8b93baea79d5816cdd89c9234ebd108a2aaf7487a4dfe9b031bf6c69cecd5cef64c51b345fbd771d74c9308a3c7ea423533ad3c346cb2e6bace2f5657bd6ea45898679d47929dc0a08db128e87b0551c977ec9a702100b1b235a61b6af5a19d51ecfb4be885d5dd0d6a1cdb6eeaad8e8bac09c9cfc6f630dd63b49e95fa585ca2957313c62038e79e6edcd57943c77b11847357318f100f4b82aa7c6e55ec6822e6c7cd6c8a29e339798acfccaab3d7a47e65259b8f0ab6a04472819b05062b7798dbec4d487a29d7fb141d19f097dca50a41643b16917427da1e2b4073f10c1d926487ef4ff3d4478a2caf4ea42e2dd39851287be54b78363eba52fd28dc2f845ba5540c0dd0644a90f77ef52cdc6c03b75620385cf18f5d669e67913bbd0b1a3824696c79ebedd7a12d01c2d443eefe3b17ba0041aed8fa4cd69bd8666aa96549a513dda3700d861143ed67f994e0a1687daa02d9c47db211b781db6e110c8677548d2155038ceb4e5e4d5d0280dc663b9f2b81561d8c1c38388b65d0f2c79d6ba70195fc88f58b901532dc258f10a6fbb1f095ee4cc1ba43b757f20809b4e462bf26110d7ebab54329e520b9efd99080b9eb27563e85cda1173ef642a6140e5f9e0a5ed4d33ee59f2173ad30929ddccbb6e35d2838f3e69aedbd30d7f2192e353c2a51b160cf89c3cba2027c8015bd9eea0a418a58bd966bd3c34251cd3a3e6710741065e676bfa6b0c2a6e090e1f1f236ee8bd5c1616033feef3da817d52702c57cd52773079dc5ab6cd1d2f0c9b7849bac6f46bb3884dc51f18f761c9a360ed096e0fb70b336c1a4b7c9c21f139c5b10e5b582bae8ed67d8bf422eed9da9dd0725475af092565eb3fc7dbc66b3a77dbfcedb2fe016a8d214fb3a22d18728b7eee51758c7f4d8af30ec534013380b3a97db6e58e333c3aae67ce03ad9d7a90e88f99323beed4f7b6c9fd2f759d32cd10d2f4711bf30f06b5e84ead25731b68bdc9260fd233befda7c7619a3c121c018295dd15515a0929a3db76df59d35334fef8d03860fc752b3706700f84313ad919c6db961c0bc5234303a07eee4b2fc756c46947b6d9227212ba06df63961b8938cac032b1c86cb22285bc7ad1c188acdee8437060f996c844118efc584bcdf7866f083669b9ad1bbf0fbe0d2df0e5c1c1c7afc531b02b2b17ba0a5ad93e03297274c8c3c73b6f1f114a1d0a5e1a37f41bf2ce385e6f589d4d6cdec1e8af144f00d4f7248ea4df8e4c655283ab770fbdbe72c48c70db7c7c5e3d7df7e11dfb24061ff26b631b231bf3b1942cdf98871a05e758eee56695517885e66852b7b4026b88bd367a1610f06fd47fde403e04a816e3e745aaeaa8f4eb8bb976baebd7d45b75df88e894f742865d2471c7b5e8d6729bf5a5a5a9140b7cd09eced163430e540756b5047ca1b0a1b626f1abd37765cc7ad7b281c85ff7c2960f3e7b87543b66093acc2f12b333e5021e3141a47c1469deb80e66a0225ec95d59c6a3af8e441b13bac6ff9e6345a4181e0d1eea2f21b92b8b1f436255ead5df36870e89cad36166df54510b16e9674be0272e7c247431b37a272b3335da2c3bb827197e395a6303b02b4f7572978c40465f3f3b1f40a6ce266e54088139451982818f46f0597784672f3ff929419c7634dec1847de82d742faa7797883d66704db61d185d3829603f839c733c12dd6ca7d5412c548475c0fe6d3f9f7cfc2f36af464a7bb5e0a50495e6471577c9439e2ee78f2d7656c2adeb6c07351eea504c9226a447699254288084d9e1e3c3724bd44b6c4cf32b9eed3991a3d97357799ee69c8edda18837c1ecf2a590ce15e0104334b297f011058d180d00ee105bfb479d5a445da6feaa47f3096870cac53a3f3db29af6e48c3cec4c1ac374c99a4b1428a33e59c449e794c1a82a088699ee755e24d23e502098caae962e737d29a36e2b44bd4a055d3ff1e62cf097e55860e8b58ae8a12b1842a6741025e63db7a81a3d9eab0c32a5b0af058f27022340490327b0727408b220264999df6b2540fca6d10e1cc4adef5df638f7e5e6b79988837aacd0540d782bf8999df3f4118a7ebb2e9084567b55586ce48d121f2dc86181b95bbe5a387352699006c2c392d506c0960f048b517d76b5194e872b51129ce57871be2b626e79ac1665eb6e335c4859b32602204f5fb45b23b4a8b4c9e32cf97d27da9386b76b1f0696dd4e85b9a19a87fe1f8a6b4b86e41501a1f73096b91fb864102c33189aa0ec98b27d7b4796d80e0e15dd05389393a1519764256a517105d377b6be90c3be4743708a004830fdb4d9ac2679b729d297dda9e1a7632cc2a06ce83a5f6f3bf7ff4ccd12f5afb5b9af593976e5462cfd6c74ae892be1cfc7285c89da2decd03bcf48f27dedf820808a353a3c486919007b9aa4f6558d8cddcd008a4139dea3d81d632a1ac1e3d440aa932a0aae707cdb24e912668c9ecac51b6dcba39622237fdb3895935973e2e40349a2afb3b0f8ba98d000eb052e4c3a9e579481747ff1a65f90e50f69b783ea9b958a1b648bcfb830b3d9278110c9f02ef45257a4c41fb3c8635325b0f81adc3fc7a290742bbb00054dab5517c857cf81162b95e12ef971501d37c0e280e24b455cac79bf", 0x1000}], 0x2, 0x0, 0x0, 0x41}}, {{&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001540)="09380d94b1183ef651b0b1edd43f9fe158733266709d377f4442e098cbb93da2aaca1ce4ca8f3909b72f0168bc97d830eef26b49501d02213278172fe8772476f6f86b67b54d23158192e3f9517817dc6d7ea45d748b5de034c797a90e2220f9fcb8218b4a909f78d089050dfa0f7221cb8acb92355522f116f0eb49cf501d35b90864c67afe4947d2280f033bb9d4a276099576beaa62d4d74153783c26", 0x9e}], 0x1, &(0x7f0000001700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r0, r2, r2, r5, r6, r1]}}, @rights={{0x30, 0x1, 0x1, [r7, r8, r1, r2, r9, r0, r10, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}], 0x88, 0x20000004}}], 0x3, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3fa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0}) 09:15:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xd00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0}) 09:15:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0}) 09:15:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3fe], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xe00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1481.058069][T25210] usb usb5: usbfs: process 25210 (syz-executor.5) did not claim interface 0 before use [ 1481.059703][T25212] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1481.069857][T25210] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1481.085353][T25202] usb usb5: usbfs: process 25202 (syz-executor.4) did not claim interface 0 before use 09:15:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1100}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) fcntl$getown(r2, 0x9) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 1481.143866][T25222] usb usb5: usbfs: process 25222 (syz-executor.5) did not claim interface 0 before use [ 1481.147183][T25225] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1481.156687][T25222] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1481.171243][T25224] usb usb5: usbfs: process 25224 (syz-executor.4) did not claim interface 0 before use 09:15:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x500], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:09 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180), 0x0) 09:15:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1200}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0}) 09:15:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0}) 09:15:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2001}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x600], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0}) 09:15:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0}) [ 1481.904240][T25237] usb usb5: usbfs: process 25237 (syz-executor.5) did not claim interface 0 before use [ 1481.915262][T25242] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1481.915381][T25237] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1481.935024][T25239] usb usb5: usbfs: process 25239 (syz-executor.4) did not claim interface 0 before use 09:15:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2003}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x601], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1481.965538][T25246] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1481.981860][T25252] usb usb5: usbfs: process 25252 (syz-executor.5) did not claim interface 0 before use [ 1481.993226][T25252] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1482.000455][T25250] usb usb5: usbfs: process 25250 (syz-executor.4) did not claim interface 0 before use 09:15:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0}) 09:15:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x700], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1482.058414][T25258] usb usb5: usbfs: process 25258 (syz-executor.5) did not claim interface 0 before use [ 1482.069499][T25258] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:09 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{0x0}], 0x1) 09:15:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x200c}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0}) 09:15:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) (async) write$snapshot(r2, 0x0, 0x0) (async, rerun: 64) fcntl$getown(r2, 0x9) (rerun: 64) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x803], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0}) 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2301}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0}) 09:15:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x900], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2303}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}) [ 1482.770027][T25263] usb usb5: usbfs: process 25263 (syz-executor.4) did not claim interface 0 before use [ 1482.780611][T25263] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1482.788067][T25266] usb usb5: usbfs: process 25266 (syz-executor.5) did not claim interface 0 before use 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2500}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1482.840788][T25280] usb usb5: usbfs: process 25280 (syz-executor.5) did not claim interface 0 before use [ 1482.861188][T25280] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1482.872887][T25285] usb usb5: usbfs: process 25285 (syz-executor.4) did not claim interface 0 before use 09:15:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xa00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) (async) fcntl$getown(r2, 0x9) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x752e, 0x0, 0x0, 0x0, 0x0}) 09:15:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0}) 09:15:10 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{0x0}], 0x1) 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4800}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0}) 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4c00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1483.616207][T25297] usb usb5: usbfs: process 25297 (syz-executor.5) did not claim interface 0 before use [ 1483.626711][T25297] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1483.651108][T25295] usb usb5: usbfs: process 25295 (syz-executor.4) did not claim interface 0 before use 09:15:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1483.672522][T25295] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1483.679928][T25305] usb usb5: usbfs: process 25305 (syz-executor.5) did not claim interface 0 before use 09:15:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x40) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) write(r1, &(0x7f00000001c0)="42e5429bda808a121ee8e4d77b53b9c1c922cafb38d77c93f3bdbadd920ac5390282604bf98d9974023d30037163c6202c42084ad672b04b3ef74239837f5aeed0646bd6e540ebd1cd9669032936d7bf1e09ab33b6f13e57acf130eceb6b1b09ff7610f37d813b9052ccc92f50030998cf06302e66cd2e7ea19f325e951e69eca6325948f8fbf0707649a73f254027de7cd381d31db137aaacfb8d0f37", 0x9d) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280)=0xaa4, 0xff) socket$nl_generic(0x10, 0x3, 0x10) 09:15:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7530, 0x0, 0x0, 0x0, 0x0}) 09:15:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0}) 09:15:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6800}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1483.758674][T25323] usb usb5: usbfs: process 25323 (syz-executor.4) did not claim interface 0 before use [ 1483.769022][T25323] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1483.776181][T25325] usb usb5: usbfs: process 25325 (syz-executor.5) did not claim interface 0 before use 09:15:11 executing program 2: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{0x0}], 0x1) 09:15:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xe00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}) 09:15:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6c00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0}) 09:15:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7400}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0}) 09:15:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1100], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1484.470331][T25332] usb usb5: usbfs: process 25332 (syz-executor.5) did not claim interface 0 before use [ 1484.482926][T25332] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1484.490339][T25335] xt_check_match: 8 callbacks suppressed [ 1484.490353][T25335] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1484.508490][T25336] usb usb5: usbfs: process 25336 (syz-executor.4) did not claim interface 0 before use 09:15:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x40) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) write(r1, &(0x7f00000001c0)="42e5429bda808a121ee8e4d77b53b9c1c922cafb38d77c93f3bdbadd920ac5390282604bf98d9974023d30037163c6202c42084ad672b04b3ef74239837f5aeed0646bd6e540ebd1cd9669032936d7bf1e09ab33b6f13e57acf130eceb6b1b09ff7610f37d813b9052ccc92f50030998cf06302e66cd2e7ea19f325e951e69eca6325948f8fbf0707649a73f254027de7cd381d31db137aaacfb8d0f37", 0x9d) (async) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280)=0xaa4, 0xff) (async) socket$nl_generic(0x10, 0x3, 0x10) 09:15:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}) 09:15:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x76f1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1200], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1484.536001][T25343] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1484.538331][T25344] usb usb5: usbfs: process 25344 (syz-executor.5) did not claim interface 0 before use [ 1484.557897][T25344] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1484.608083][T25351] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1484.620038][T25352] usb usb5: usbfs: process 25352 (syz-executor.4) did not claim interface 0 before use [ 1484.641023][T25352] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x40) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) write(r1, &(0x7f00000001c0)="42e5429bda808a121ee8e4d77b53b9c1c922cafb38d77c93f3bdbadd920ac5390282604bf98d9974023d30037163c6202c42084ad672b04b3ef74239837f5aeed0646bd6e540ebd1cd9669032936d7bf1e09ab33b6f13e57acf130eceb6b1b09ff7610f37d813b9052ccc92f50030998cf06302e66cd2e7ea19f325e951e69eca6325948f8fbf0707649a73f254027de7cd381d31db137aaacfb8d0f37", 0x9d) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280)=0xaa4, 0xff) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x40) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) (async) write(r1, &(0x7f00000001c0)="42e5429bda808a121ee8e4d77b53b9c1c922cafb38d77c93f3bdbadd920ac5390282604bf98d9974023d30037163c6202c42084ad672b04b3ef74239837f5aeed0646bd6e540ebd1cd9669032936d7bf1e09ab33b6f13e57acf130eceb6b1b09ff7610f37d813b9052ccc92f50030998cf06302e66cd2e7ea19f325e951e69eca6325948f8fbf0707649a73f254027de7cd381d31db137aaacfb8d0f37", 0x9d) (async) syz_open_pts(r0, 0x0) (async) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280)=0xaa4, 0xff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 09:15:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7a00}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0}) 09:15:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1201], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xa100}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0}) [ 1485.335537][T25362] usb usb5: usbfs: process 25362 (syz-executor.5) did not claim interface 0 before use [ 1485.347338][T25362] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1485.358436][T25364] usb usb5: usbfs: process 25364 (syz-executor.4) did not claim interface 0 before use [ 1485.358672][T25363] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1801], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xf176}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1485.390535][T25364] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1485.401803][T25368] usb usb5: usbfs: process 25368 (syz-executor.2) did not claim interface 0 before use [ 1485.423012][T25371] usb usb5: usbfs: process 25371 (syz-executor.5) did not claim interface 0 before use 09:15:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}) [ 1485.431018][T25375] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1485.455108][T25378] usb usb5: usbfs: process 25378 (syz-executor.2) did not claim interface 0 before use [ 1485.467016][T25378] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1485.475654][T25382] usb usb5: usbfs: process 25382 (syz-executor.4) did not claim interface 0 before use 09:15:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) syz_open_pts(r2, 0x501100) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x309, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0}) 09:15:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1a01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1a02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1485.543772][T25394] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1485.545536][T25395] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1485.551244][T25396] usb usb5: usbfs: process 25396 (syz-executor.5) did not claim interface 0 before use [ 1485.577372][T25396] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0}) 09:15:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1485.583037][T25402] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1485.595106][T25399] usb usb5: usbfs: process 25399 (syz-executor.4) did not claim interface 0 before use [ 1485.605325][T25399] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1485.612750][T25398] usb usb5: usbfs: process 25398 (syz-executor.2) did not claim interface 0 before use [ 1485.626684][T25405] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1c01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}) 09:15:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}) [ 1485.638057][T25406] usb usb5: usbfs: process 25406 (syz-executor.5) did not claim interface 0 before use [ 1485.666262][T25406] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1485.673784][T25412] usb usb5: usbfs: process 25412 (syz-executor.2) did not claim interface 0 before use [ 1485.684479][T25413] usb usb5: usbfs: process 25413 (syz-executor.4) did not claim interface 0 before use [ 1485.684639][T25409] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0}) 09:15:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1c03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) syz_open_pts(r2, 0x501100) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x309, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) (async) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 1486.419040][T25418] usb usb5: usbfs: process 25418 (syz-executor.2) did not claim interface 0 before use [ 1486.427807][T25422] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1486.430250][T25418] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1486.446851][T25417] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1486.457837][T25420] usb usb5: usbfs: process 25420 (syz-executor.5) did not claim interface 0 before use 09:15:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x4f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0}) 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2002], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x7ff0bdbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1486.473466][T25424] usb usb5: usbfs: process 25424 (syz-executor.4) did not claim interface 0 before use [ 1486.486162][T25424] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1486.493666][T25429] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2003], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1486.517633][T25436] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1486.525308][T25437] usb usb5: usbfs: process 25437 (syz-executor.2) did not claim interface 0 before use [ 1486.546379][T25437] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1486.553831][T25439] usb usb5: usbfs: process 25439 (syz-executor.5) did not claim interface 0 before use 09:15:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) syz_open_pts(r2, 0x501100) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) rmdir(&(0x7f0000000080)='./file0\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x309, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2203], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0}) [ 1486.565627][T25442] usb usb5: usbfs: process 25442 (syz-executor.4) did not claim interface 0 before use 09:15:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xc00, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2500], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_socket_connect_nvme_tcp() write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 1486.594785][T25443] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1486.615314][T25455] usb usb5: usbfs: process 25455 (syz-executor.4) did not claim interface 0 before use 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2802], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2a00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0}) 09:15:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0}) 09:15:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1486.650375][T25455] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1486.657739][T25457] usb usb5: usbfs: process 25457 (syz-executor.5) did not claim interface 0 before use [ 1486.667651][T25461] vhci_hcd: default hub control req: 0000 v0c00 i0002 l0 [ 1486.687543][T25465] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2c00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0}) [ 1486.725843][T25475] usb usb5: usbfs: process 25475 (syz-executor.2) did not claim interface 0 before use [ 1486.737218][T25475] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1486.744561][T25472] usb usb5: usbfs: process 25472 (syz-executor.5) did not claim interface 0 before use [ 1486.758424][T25477] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1486.766445][T25476] usb usb5: usbfs: process 25476 (syz-executor.4) did not claim interface 0 before use 09:15:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2c02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0}) [ 1486.780839][T25482] usb usb5: usbfs: process 25482 (syz-executor.5) did not claim interface 0 before use [ 1486.818805][T25486] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1486.830922][T25488] usb usb5: usbfs: process 25488 (syz-executor.5) did not claim interface 0 before use [ 1486.840786][T25488] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2e44], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0}) 09:15:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) syz_socket_connect_nvme_tcp() write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3003], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1487.488379][T25493] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1487.495925][T25497] usb usb5: usbfs: process 25497 (syz-executor.2) did not claim interface 0 before use [ 1487.511341][T25497] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1487.522220][T25496] usb usb5: usbfs: process 25496 (syz-executor.5) did not claim interface 0 before use 09:15:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0}) 09:15:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 1487.532204][T25499] usb usb5: usbfs: process 25499 (syz-executor.4) did not claim interface 0 before use 09:15:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3202], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1487.558681][T25508] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1487.566109][T25511] usb usb5: usbfs: process 25511 (syz-executor.5) did not claim interface 0 before use 09:15:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_socket_connect_nvme_tcp() write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) syz_socket_connect_nvme_tcp() (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) syz_open_pts(r0, 0x0) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (async) 09:15:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3402], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0}) 09:15:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3602], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0}) [ 1487.602711][T25511] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1487.631027][T25519] usb usb5: usbfs: process 25519 (syz-executor.4) did not claim interface 0 before use [ 1487.642156][T25521] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3802], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1487.674756][T25526] usb usb5: usbfs: process 25526 (syz-executor.5) did not claim interface 0 before use [ 1487.704295][T25526] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1487.711626][T25531] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0}) [ 1487.722780][T25533] usb usb5: usbfs: process 25533 (syz-executor.4) did not claim interface 0 before use [ 1487.754108][T25546] usb usb5: usbfs: process 25546 (syz-executor.5) did not claim interface 0 before use [ 1487.774860][T25546] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0}) 09:15:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3803], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0}) 09:15:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3a00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1488.424675][T25554] usb usb5: usbfs: process 25554 (syz-executor.4) did not claim interface 0 before use [ 1488.453784][T25554] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1488.461055][T25557] usb usb5: usbfs: process 25557 (syz-executor.5) did not claim interface 0 before use 09:15:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0}) 09:15:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3a02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1870, 0x0}) 09:15:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1488.470963][T25553] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3a03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1488.520369][T25567] usb usb5: usbfs: process 25567 (syz-executor.4) did not claim interface 0 before use [ 1488.543691][T25567] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1488.555456][T25572] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1488.564799][T25570] usb usb5: usbfs: process 25570 (syz-executor.5) did not claim interface 0 before use 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4001], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0}) 09:15:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1970, 0x0}) 09:15:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:16 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4003], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1489.285443][T25580] usb usb5: usbfs: process 25580 (syz-executor.5) did not claim interface 0 before use 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4203], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2500, 0x0}) 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4400], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x442e], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1489.326391][T25580] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1489.338794][T25582] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1489.353761][T25588] usb usb5: usbfs: process 25588 (syz-executor.4) did not claim interface 0 before use 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4800], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1489.382545][T25588] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1489.389990][T25594] usb usb5: usbfs: process 25594 (syz-executor.5) did not claim interface 0 before use 09:15:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0}) 09:15:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0}) 09:15:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4801], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1489.429100][T25605] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1489.452306][T25608] usb usb5: usbfs: process 25608 (syz-executor.5) did not claim interface 0 before use [ 1489.470098][T25608] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1489.477506][T25610] usb usb5: usbfs: process 25610 (syz-executor.4) did not claim interface 0 before use 09:15:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4c00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0}) 09:15:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0}) 09:15:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0}) 09:15:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0}) 09:15:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4c01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1490.159758][T25620] usb usb5: usbfs: process 25620 (syz-executor.4) did not claim interface 0 before use [ 1490.169951][T25620] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1490.170171][T25619] xt_check_match: 24 callbacks suppressed [ 1490.170186][T25619] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1490.181455][T25625] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1490.235836][T25628] usb usb5: usbfs: process 25628 (syz-executor.4) did not claim interface 0 before use [ 1490.262769][T25633] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1490.263550][T25628] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0}) 09:15:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4e01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1490.282038][T25632] usb usb5: usbfs: process 25632 (syz-executor.5) did not claim interface 0 before use [ 1490.313689][T25638] usb usb5: usbfs: process 25638 (syz-executor.4) did not claim interface 0 before use [ 1490.325389][T25638] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1490.332710][T25637] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1490.342067][T25640] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0}) 09:15:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x2e750000, 0x0, 0x0, 0x0, 0x0}) 09:15:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4e02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) write$cgroup_type(r2, &(0x7f0000000080), 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x500000) [ 1491.007703][T25643] usb usb5: usbfs: process 25643 (syz-executor.5) did not claim interface 0 before use [ 1491.022814][T25651] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1491.044093][T25643] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x30750000, 0x0, 0x0, 0x0, 0x0}) 09:15:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0}) 09:15:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x5200], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1491.051405][T25650] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1491.088124][T25659] usb usb5: usbfs: process 25659 (syz-executor.4) did not claim interface 0 before use [ 1491.105200][T25656] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1491.126906][T25659] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0}) 09:15:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0}) [ 1491.134313][T25664] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1491.142028][T25661] usb usb5: usbfs: process 25661 (syz-executor.5) did not claim interface 0 before use [ 1491.186918][T25668] usb usb5: usbfs: process 25668 (syz-executor.5) did not claim interface 0 before use [ 1491.204461][T25668] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1491.211897][T25669] usb usb5: usbfs: process 25669 (syz-executor.4) did not claim interface 0 before use [ 1491.222942][T25669] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x5201], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:15:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) write$cgroup_type(r2, &(0x7f0000000080), 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x500000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) syz_open_pts(r0, 0x0) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (async) ioctl$KDMKTONE(r2, 0x4b30, 0x500000) (async) 09:15:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7018, 0x0}) 09:15:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0}) 09:15:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x5601], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7019, 0x0}) [ 1491.868738][T25676] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1491.872976][T25677] usb usb5: usbfs: process 25677 (syz-executor.4) did not claim interface 0 before use [ 1491.893544][T25677] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1491.900834][T25678] usb usb5: usbfs: process 25678 (syz-executor.5) did not claim interface 0 before use [ 1491.910685][T25675] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0}) 09:15:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x5a03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1491.936218][T25683] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1491.942403][T25685] usb usb5: usbfs: process 25685 (syz-executor.5) did not claim interface 0 before use [ 1491.970072][T25685] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1491.977593][T25688] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0}) [ 1491.990518][T25691] usb usb5: usbfs: process 25691 (syz-executor.4) did not claim interface 0 before use [ 1492.018515][T25699] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1492.033351][T25702] usb usb5: usbfs: process 25702 (syz-executor.5) did not claim interface 0 before use [ 1492.047283][T25702] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1492.054784][T25698] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1492.063547][T25704] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}) 09:15:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0}) 09:15:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) write$cgroup_type(r2, &(0x7f0000000080), 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x500000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) syz_open_pts(r0, 0x0) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (async) ioctl$KDMKTONE(r2, 0x4b30, 0x500000) (async) 09:15:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6201], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:15:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) [ 1492.739577][T25711] usb usb5: usbfs: process 25711 (syz-executor.5) did not claim interface 0 before use [ 1492.744837][T25712] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1492.754803][T25711] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1492.768805][T25707] usb usb5: usbfs: process 25707 (syz-executor.4) did not claim interface 0 before use 09:15:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0}) 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6602], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) [ 1492.783209][T25707] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1492.790471][T25708] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1492.809090][T25718] usb usb5: usbfs: process 25718 (syz-executor.5) did not claim interface 0 before use [ 1492.823429][T25718] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6603], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1492.835506][T25722] usb usb5: usbfs: process 25722 (syz-executor.4) did not claim interface 0 before use 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6800], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0}) 09:15:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1492.868890][T25722] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1492.876143][T25725] usb usb5: usbfs: process 25725 (syz-executor.5) did not claim interface 0 before use [ 1492.886278][T25728] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1300, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) write$tcp_congestion(r1, &(0x7f00000000c0)='illinois\x00', 0x9) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6c00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1492.936394][T25744] usb usb5: usbfs: process 25744 (syz-executor.4) did not claim interface 0 before use [ 1492.954960][T25744] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1492.962298][T25746] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:15:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 09:15:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0}) 09:15:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6f00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7203], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1493.612418][T25757] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1493.620000][T25755] usb usb5: usbfs: process 25755 (syz-executor.4) did not claim interface 0 before use [ 1493.637212][T25755] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1493.645686][T25754] usb usb5: usbfs: process 25754 (syz-executor.5) did not claim interface 0 before use 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7400], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0}) 09:15:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7601], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1493.661132][T25754] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1493.680020][T25765] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1493.692208][T25767] usb usb5: usbfs: process 25767 (syz-executor.4) did not claim interface 0 before use 09:15:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1300, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) write$tcp_congestion(r1, &(0x7f00000000c0)='illinois\x00', 0x9) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0}) [ 1493.834692][T25775] usb usb5: usbfs: process 25775 (syz-executor.5) did not claim interface 0 before use [ 1493.844904][T25775] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7a00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0}) 09:15:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0}) 09:15:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7a03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7c01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0}) 09:15:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7e02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1494.476281][T25785] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1494.486314][T25788] usb usb5: usbfs: process 25788 (syz-executor.5) did not claim interface 0 before use [ 1494.501938][T25788] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1494.509678][T25786] usb usb5: usbfs: process 25786 (syz-executor.4) did not claim interface 0 before use [ 1494.555025][T25796] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1494.562610][T25798] usb usb5: usbfs: process 25798 (syz-executor.4) did not claim interface 0 before use [ 1494.574427][T25798] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1300, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) write$tcp_congestion(r1, &(0x7f00000000c0)='illinois\x00', 0x9) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0}) [ 1494.676763][T25803] usb usb5: usbfs: process 25803 (syz-executor.5) did not claim interface 0 before use [ 1494.688024][T25803] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8202], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0}) 09:15:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0}) 09:15:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8203], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0}) [ 1495.331768][T25810] usb usb5: usbfs: process 25810 (syz-executor.5) did not claim interface 0 before use [ 1495.341616][T25810] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1495.349147][T25814] usb usb5: usbfs: process 25814 (syz-executor.4) did not claim interface 0 before use [ 1495.357233][T25815] xt_check_match: 12 callbacks suppressed [ 1495.357249][T25815] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1495.373891][T25811] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8602], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1495.396102][T25819] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1495.418528][T25824] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1495.425960][T25825] usb usb5: usbfs: process 25825 (syz-executor.5) did not claim interface 0 before use [ 1495.437309][T25825] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1495.444661][T25827] usb usb5: usbfs: process 25827 (syz-executor.4) did not claim interface 0 before use [ 1495.464871][T25828] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0}) 09:15:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1495.548437][T25833] usb usb5: usbfs: process 25833 (syz-executor.5) did not claim interface 0 before use [ 1495.564587][T25833] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1495.571967][T25832] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8a03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 09:15:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x7, 0x39, 0x9, 0x7, 0x1, "c4f49be66d28b8ad939116ffbff26e8a065bf3"}) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0x0) r7 = accept4$tipc(r2, &(0x7f0000000400)=@name, &(0x7f0000000440)=0x10, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) write$snapshot(r8, 0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x40c000, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0xac002, 0x0) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) write$snapshot(r11, 0x0, 0x0) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r12, 0x3305) write$snapshot(r12, 0x0, 0x0) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r13, 0x3305) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="5cedd972878cbcd51d72e8720ab6e22a2b62f96b3e9c0c8b5655a6346ac17cf886675641280a06fc5d4382e3bb71269deb7e6e4b9e0e58cfa7012e77142352c000eeac046fbf14f2d5fa22baa36407960ec38cc123129da5d923beaeba615895d45fc9c506afabe2ea174fbf87beb8688370493e4e1bdc0d0c90bebc7ff050fedca78895dabe0898cb5425beb85b5b0ce3c9f130986630f25682c299f1dc2130cfd7b9f9b876e0b6acde1f844ac35ecbd06d506ccf1b14cc1f", 0xb9}, {&(0x7f0000000680)="4e9775d16dd6f94c291aea04d9af7ba28f7d27652b32cc4d319d9dee4da3b7d25b6d45bb0fb81ebdaf1b1377d616dfb3c6fa0ef11a956eecf71b3ff5252a0ea4eb9b7e85498159f3b214d2bdb91ea744c3a509044168fed0de92a8241fc4fc74b533bc8f6c8bd12c35fec2805cee38ca3a4f8defeb9c620950267e18ebca2ba8c082c5788a00ab3e5ba76492870febe1161dce", 0x93}], 0x2, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @rights={{0x2c, 0x1, 0x1, [r7, r8, r2, r9, r10, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x88, 0x800}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0}) 09:15:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x123, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8c02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}) [ 1496.210305][T25840] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1496.213804][T25842] usb usb5: usbfs: process 25842 (syz-executor.4) did not claim interface 0 before use [ 1496.234804][T25842] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1496.243823][T25841] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1496.250953][T25837] usb usb5: usbfs: process 25837 (syz-executor.5) did not claim interface 0 before use 09:15:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0}) 09:15:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1496.274442][T25847] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1496.300302][T25855] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1496.307879][T25853] usb usb5: usbfs: process 25853 (syz-executor.4) did not claim interface 0 before use 09:15:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8e03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9402], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}) [ 1496.321130][T25853] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1496.331814][T25854] usb usb5: usbfs: process 25854 (syz-executor.5) did not claim interface 0 before use [ 1496.353886][T25860] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1496.366895][T25861] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1496.388948][T25863] usb usb5: usbfs: process 25863 (syz-executor.4) did not claim interface 0 before use [ 1496.405178][T25865] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1496.426240][T25863] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0}) 09:15:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9a03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) 09:15:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x7, 0x39, 0x9, 0x7, 0x1, "c4f49be66d28b8ad939116ffbff26e8a065bf3"}) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0x0) (async) r7 = accept4$tipc(r2, &(0x7f0000000400)=@name, &(0x7f0000000440)=0x10, 0x0) (async) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) (async) write$snapshot(r8, 0x0, 0x0) (async) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x40c000, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0xac002, 0x0) (async) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) (async) write$snapshot(r11, 0x0, 0x0) (async) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r12, 0x3305) (async) write$snapshot(r12, 0x0, 0x0) (async) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r13, 0x3305) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="5cedd972878cbcd51d72e8720ab6e22a2b62f96b3e9c0c8b5655a6346ac17cf886675641280a06fc5d4382e3bb71269deb7e6e4b9e0e58cfa7012e77142352c000eeac046fbf14f2d5fa22baa36407960ec38cc123129da5d923beaeba615895d45fc9c506afabe2ea174fbf87beb8688370493e4e1bdc0d0c90bebc7ff050fedca78895dabe0898cb5425beb85b5b0ce3c9f130986630f25682c299f1dc2130cfd7b9f9b876e0b6acde1f844ac35ecbd06d506ccf1b14cc1f", 0xb9}, {&(0x7f0000000680)="4e9775d16dd6f94c291aea04d9af7ba28f7d27652b32cc4d319d9dee4da3b7d25b6d45bb0fb81ebdaf1b1377d616dfb3c6fa0ef11a956eecf71b3ff5252a0ea4eb9b7e85498159f3b214d2bdb91ea744c3a509044168fed0de92a8241fc4fc74b533bc8f6c8bd12c35fec2805cee38ca3a4f8defeb9c620950267e18ebca2ba8c082c5788a00ab3e5ba76492870febe1161dce", 0x93}], 0x2, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @rights={{0x2c, 0x1, 0x1, [r7, r8, r2, r9, r10, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x88, 0x800}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0}) 09:15:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}) 09:15:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9c02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1497.076876][T25871] usb usb5: usbfs: process 25871 (syz-executor.5) did not claim interface 0 before use [ 1497.086699][T25871] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1497.094280][T25867] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1497.094489][T25874] usb usb5: usbfs: process 25874 (syz-executor.4) did not claim interface 0 before use [ 1497.115838][T25869] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1497.157541][T25882] usb usb5: usbfs: process 25882 (syz-executor.5) did not claim interface 0 before use [ 1497.179731][T25887] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1497.183861][T25882] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1497.197837][T25888] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9c03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}) 09:15:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9e00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0}) [ 1497.214008][T25886] usb usb5: usbfs: process 25886 (syz-executor.4) did not claim interface 0 before use [ 1497.238933][T25890] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1497.253930][T25892] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1497.274496][T25894] usb usb5: usbfs: process 25894 (syz-executor.4) did not claim interface 0 before use [ 1497.284266][T25894] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1497.294809][T25898] usb usb5: usbfs: process 25898 (syz-executor.5) did not claim interface 0 before use 09:15:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x323, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) (async) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x7, 0x39, 0x9, 0x7, 0x1, "c4f49be66d28b8ad939116ffbff26e8a065bf3"}) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0x0) (async) r7 = accept4$tipc(r2, &(0x7f0000000400)=@name, &(0x7f0000000440)=0x10, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) write$snapshot(r8, 0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x40c000, 0x0) (async) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0xac002, 0x0) (async) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) (async) write$snapshot(r11, 0x0, 0x0) (async) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r12, 0x3305) write$snapshot(r12, 0x0, 0x0) (async) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r13, 0x3305) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="5cedd972878cbcd51d72e8720ab6e22a2b62f96b3e9c0c8b5655a6346ac17cf886675641280a06fc5d4382e3bb71269deb7e6e4b9e0e58cfa7012e77142352c000eeac046fbf14f2d5fa22baa36407960ec38cc123129da5d923beaeba615895d45fc9c506afabe2ea174fbf87beb8688370493e4e1bdc0d0c90bebc7ff050fedca78895dabe0898cb5425beb85b5b0ce3c9f130986630f25682c299f1dc2130cfd7b9f9b876e0b6acde1f844ac35ecbd06d506ccf1b14cc1f", 0xb9}, {&(0x7f0000000680)="4e9775d16dd6f94c291aea04d9af7ba28f7d27652b32cc4d319d9dee4da3b7d25b6d45bb0fb81ebdaf1b1377d616dfb3c6fa0ef11a956eecf71b3ff5252a0ea4eb9b7e85498159f3b214d2bdb91ea744c3a509044168fed0de92a8241fc4fc74b533bc8f6c8bd12c35fec2805cee38ca3a4f8defeb9c620950267e18ebca2ba8c082c5788a00ab3e5ba76492870febe1161dce", 0x93}], 0x2, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @rights={{0x2c, 0x1, 0x1, [r7, r8, r2, r9, r10, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x88, 0x800}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xa403], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0}) 09:15:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) 09:15:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1497.950300][T25900] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1497.977498][T25908] usb usb5: usbfs: process 25908 (syz-executor.5) did not claim interface 0 before use [ 1497.992664][T25908] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0}) 09:15:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1498.000399][T25910] usb usb5: usbfs: process 25910 (syz-executor.4) did not claim interface 0 before use [ 1498.022140][T25910] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1498.029687][T25914] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1498.059877][T25925] usb usb5: usbfs: process 25925 (syz-executor.5) did not claim interface 0 before use [ 1498.089612][T25925] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1498.099213][T25929] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb400], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0}) 09:15:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0}) 09:15:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) 09:15:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb402], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb801], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xba01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1498.816474][T25933] usb usb5: usbfs: process 25933 (syz-executor.4) did not claim interface 0 before use [ 1498.839573][T25933] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1498.847945][T25938] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1498.856840][T25937] usb usb5: usbfs: process 25937 (syz-executor.5) did not claim interface 0 before use 09:15:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}) 09:15:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0}) 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xba03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1498.907485][T25950] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1498.929528][T25954] usb usb5: usbfs: process 25954 (syz-executor.4) did not claim interface 0 before use 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xbc03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0}) [ 1498.952025][T25954] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1498.959458][T25955] usb usb5: usbfs: process 25955 (syz-executor.5) did not claim interface 0 before use [ 1498.992313][T25963] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1499.000026][T25964] usb usb5: usbfs: process 25964 (syz-executor.4) did not claim interface 0 before use [ 1499.014633][T25964] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x18700000, 0x0}) 09:15:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xbe01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0}) 09:15:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc200], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1499.685718][T25968] usb usb5: usbfs: process 25968 (syz-executor.5) did not claim interface 0 before use [ 1499.715647][T25968] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1499.723353][T25973] usb usb5: usbfs: process 25973 (syz-executor.4) did not claim interface 0 before use 09:15:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x19700000, 0x0}) 09:15:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}) 09:15:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1499.733401][T25970] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc201], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x25000000, 0x0}) [ 1499.790213][T25986] usb usb5: usbfs: process 25986 (syz-executor.5) did not claim interface 0 before use [ 1499.803941][T25986] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1499.812595][T25990] usb usb5: usbfs: process 25990 (syz-executor.4) did not claim interface 0 before use [ 1499.834105][T25992] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1499.848448][T25995] usb usb5: usbfs: process 25995 (syz-executor.5) did not claim interface 0 before use [ 1499.859598][T25995] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc203], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (async) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) 09:15:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}) 09:15:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0}) 09:15:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xc20, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc401], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1500.547127][T26005] usb usb5: usbfs: process 26005 (syz-executor.5) did not claim interface 0 before use [ 1500.549742][T26003] xt_check_match: 16 callbacks suppressed [ 1500.549759][T26003] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1500.559984][T26005] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc803], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}) 09:15:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0}) [ 1500.588582][T26011] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1500.593987][T26002] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1500.620733][T26015] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xcc03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1500.646158][T26017] usb usb5: usbfs: process 26017 (syz-executor.4) did not claim interface 0 before use [ 1500.674660][T26017] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1500.681973][T26021] usb usb5: usbfs: process 26021 (syz-executor.5) did not claim interface 0 before use [ 1500.693950][T26023] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1500.704361][T26019] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0}) 09:15:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xce03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0)=0x7, 0x4) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}) 09:15:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1501.407196][T26025] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1501.424216][T26027] usb usb5: usbfs: process 26027 (syz-executor.4) did not claim interface 0 before use [ 1501.435118][T26032] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1501.446071][T26027] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd002], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}) 09:15:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0}) 09:15:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd003], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1501.453375][T26034] usb usb5: usbfs: process 26034 (syz-executor.5) did not claim interface 0 before use [ 1501.476702][T26037] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1501.490508][T26040] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1501.516038][T26044] usb usb5: usbfs: process 26044 (syz-executor.5) did not claim interface 0 before use [ 1501.528193][T26044] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1501.535461][T26045] usb usb5: usbfs: process 26045 (syz-executor.4) did not claim interface 0 before use [ 1501.550492][T26048] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0}) 09:15:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}) [ 1501.568327][T26050] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1501.585607][T26053] usb usb5: usbfs: process 26053 (syz-executor.5) did not claim interface 0 before use [ 1501.607660][T26053] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1501.618424][T26054] usb usb5: usbfs: process 26054 (syz-executor.4) did not claim interface 0 before use [ 1501.628191][T26054] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0}) 09:15:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd200], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}) 09:15:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0)=0x7, 0x4) syz_open_pts(r0, 0x0) (async) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 1502.286333][T26062] usb usb5: usbfs: process 26062 (syz-executor.5) did not claim interface 0 before use [ 1502.299467][T26066] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1502.310021][T26062] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1502.317481][T26061] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0}) 09:15:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd600], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1502.334792][T26067] usb usb5: usbfs: process 26067 (syz-executor.4) did not claim interface 0 before use [ 1502.366601][T26067] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1502.373955][T26073] usb usb5: usbfs: process 26073 (syz-executor.5) did not claim interface 0 before use 09:15:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x200c, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}) 09:15:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0}) 09:15:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd603], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1502.383908][T26074] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1502.392097][T26076] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0)=0x7, 0x4) (async) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 09:15:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd800], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1502.431734][T26081] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1502.444495][T26084] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1502.451842][T26080] usb usb5: usbfs: process 26080 (syz-executor.5) did not claim interface 0 before use [ 1502.468231][T26080] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd801], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1502.475520][T26085] usb usb5: usbfs: process 26085 (syz-executor.4) did not claim interface 0 before use 09:15:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 09:15:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}) 09:15:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xda02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:15:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xdc03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) [ 1503.140194][T26101] usb usb5: usbfs: process 26101 (syz-executor.5) did not claim interface 0 before use [ 1503.156627][T26101] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1503.164385][T26102] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1503.171474][T26097] usb usb5: usbfs: process 26097 (syz-executor.4) did not claim interface 0 before use 09:15:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xde03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x2303, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xe001], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1503.189492][T26097] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1503.198497][T26109] usb usb5: usbfs: process 26109 (syz-executor.5) did not claim interface 0 before use [ 1503.214137][T26114] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1503.249892][T26119] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0}) 09:15:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0}) 09:15:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xe803], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}) 09:15:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xea00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xea02], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xea03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}) 09:15:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0}) [ 1504.002149][T26129] usb usb5: usbfs: process 26129 (syz-executor.4) did not claim interface 0 before use [ 1504.015690][T26129] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1504.023128][T26125] usb usb5: usbfs: process 26125 (syz-executor.5) did not claim interface 0 before use [ 1504.032837][T26127] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1504.041518][T26130] usb usb5: usbfs: process 26130 (syz-executor.3) did not claim interface 0 before use [ 1504.072787][T26141] usb usb5: usbfs: process 26141 (syz-executor.4) did not claim interface 0 before use [ 1504.085834][T26141] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1504.093115][T26145] usb usb5: usbfs: process 26145 (syz-executor.5) did not claim interface 0 before use [ 1504.102848][T26143] usb usb5: usbfs: process 26143 (syz-executor.3) did not claim interface 0 before use 09:15:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xec03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0}) 09:15:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0}) 09:15:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xee01], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xee03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf001], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf202], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0}) [ 1504.868401][T26153] usb usb5: usbfs: process 26153 (syz-executor.4) did not claim interface 0 before use [ 1504.878388][T26153] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1504.885717][T26152] usb usb5: usbfs: process 26152 (syz-executor.3) did not claim interface 0 before use [ 1504.895597][T26157] usb usb5: usbfs: process 26157 (syz-executor.5) did not claim interface 0 before use [ 1504.905592][T26156] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1504.941908][T26170] usb usb5: usbfs: process 26170 (syz-executor.5) did not claim interface 0 before use [ 1504.952867][T26171] usb usb5: usbfs: process 26171 (syz-executor.4) did not claim interface 0 before use [ 1504.962645][T26171] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:32 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf203], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0x2}, 0x10000, 0x84, &(0x7f00000000c0)="0e2591efcc243f54465404f4851883c3a6a8ecdcd99d92b79703be9353ee716f115f1b5aa47ed9daf0f4a13d6b7c4b8e8bc1719e20ee5af37def0d6e49bbdbda6cdc21ad2b56705be9021ba08c7dc698d2d8d38a3e8aebf135d07a197893a35a2220b7ce652078d3570b3d6660a5e3b57d0c6d21494d2dea5dcb82fd9e49e6dd8cca60ecbe62626d4cd1b5d223e3c488741ee1c34317b4cbad8f27acc02bcd9609a8560c17a28a8ac534e2536cb450496f5bc8d1ccbd4867c76efcece676ad4b9ac106f7694fff2f61928574bf5078eb92907c45533dcb93f03c6073904b48", 0xdf, 0xffffffff, 0x5, 0x78, 0x0, 0x1f, &(0x7f00000001c0)="4d24afb656816ec5bd0a38bec64add5ccddbc945f07485fbef137ae1cf4bb74ce0d3c1b813000e4a6a883cb67a9b9cf6156bd867a01a59477942c80ee38c6fde203bbc91070268d8c2bad8585198fe48dee145c6888ed3bee81e84e94d1c47153e630d39bc1e9c26f1634090317f60a9091d8407a1d4aec6f407b441888ef9e74f56e8fe33ba8e6007a059dd6761448b3c4474f2b16b4503012dc4e319ebd2eea4ee097135fee3b79b3d8b1ae4b89d52b23d2612297033dc1fd97d6a4fc60fc59c89c68a04a38bb8ecae927e86e0d1bd03ca9138a8dda13b7e908c232cf2b72cab41", [{0x1000, 0xfffffffc, 0x40}, {0x9, 0x4d5, 0x7}, {0x8, 0x6, 0x7}, {0x6, 0x40, 0xff}, {0x41, 0x6, 0xffffff00}, {0x9017, 0x7, 0x131}, {0x5, 0x6}, {0x8, 0x4, 0x7}, {0xff8, 0xfffffff8, 0x101}, {0x5, 0xd4, 0x8}, {0x4, 0x0, 0x5}, {0x7, 0x1, 0x9}, {0x2, 0x6}, {0x8, 0xfffffffb, 0x7}, {0x5deb, 0x100, 0x6}, {0x7, 0xebf0, 0x80000000}, {0x5, 0xf692, 0x33a2}, {0x3, 0x1, 0x6}, {0x7, 0x9, 0x2}, {0x4, 0x66187f3b, 0x5}, {0x3ff, 0x101, 0x6b7e203e}, {0x0, 0x5, 0xce}, {0x9, 0x80, 0x7}, {0x8, 0x9, 0x1000}, {0xa65, 0x5, 0xa1}, {0xffffffff, 0x0, 0x9}, {0xfffffeff, 0x491c, 0x3}, {0x9, 0x3, 0xd212}, {0x1f, 0x3, 0x1}, {0x1, 0x8, 0x6}, {0x7, 0x46, 0x3}, {0x5, 0x0, 0x1}, {0x3, 0x400, 0xfff}, {0x4, 0x5, 0xce1}, {0x1000, 0x2, 0xffff}, {0x0, 0x1, 0x6b}, {0x2, 0x1, 0x3}, {0x541bcb0c, 0x800080, 0x6}, {0x401, 0xc8, 0x182c00}, {0x8001, 0xfffffffe, 0x7}, {0x400, 0x0, 0x7}, {0x3ff, 0xffffffff, 0x7f}, {0x8, 0x401, 0xfffffff7}, {0x401, 0x3f, 0x6}, {0x0, 0x1, 0x10001}, {0x8, 0x200, 0x672d}, {0x2, 0x8, 0x956}, {0x81, 0x1, 0xffffffff}, {0x8001, 0x20, 0x1}, {0x7ff, 0x8, 0x7}, {0x4, 0x1, 0x687}, {0x7fff, 0xffffff01, 0x400}, {0x5, 0x8}, {0x6, 0x7, 0x80000001}, {0x7f, 0x400, 0x8}, {0x2, 0x95cf}, {0xd9a9, 0x5, 0x400}, {0x9}, {0x7, 0x672, 0x1ff}, {0x400000, 0x9, 0xfffffc00}, {0x80000000, 0xef6b, 0x80000000}, {0x7e0, 0x29, 0xfffffffc}, {0x2, 0x8000, 0x3ff}, {0x401, 0x4c000000, 0x1f}, {0x400, 0x8, 0xffffffff}, {0x7, 0x4ff8, 0xaf41}, {0x3, 0xcf8f, 0x400}, {0x9, 0x2, 0x8}, {0x7, 0x4d5, 0x6}, {0x6d, 0x0, 0x7}, {0x1, 0x2, 0x8000}, {0x3f, 0x400, 0xa61}, {0x3, 0x0, 0x3}, {0xffff, 0x101, 0x9}, {0x7f, 0xffff0001, 0x2}, {0x2, 0x6, 0x4f0}, {0xf854a91a, 0xfffffffe, 0x100}, {0x0, 0x80000001, 0xe39}, {0x4, 0x1d9ac091, 0x101}, {0x5, 0x8, 0x5}, {0x3ff, 0x1000, 0xc8}, {0x8, 0x4, 0x401}, {0x0, 0x8, 0xec9}, {0x200, 0x1, 0x800}, {0x7fffffff, 0x8, 0x7f}, {0x1, 0x9, 0x2}, {0x400, 0xd8, 0x6}, {0x80000000, 0xffff, 0x4}, {0x1, 0x200, 0x8001}, {0xf2, 0x400, 0x100}, {0x2, 0x218, 0x101}, {0x0, 0x100, 0x9aa}, {0x40, 0x3ff, 0x20}, {0x7fff, 0x7ff, 0x3}, {0x7, 0x6, 0xffff0000}, {0x9, 0x20, 0x6f82d296}, {0x85, 0x1000, 0x44f2}, {0x100, 0x5}, {0xb02, 0x4, 0xffffffff}, {0x2, 0x5, 0x4}, {0x3, 0x7, 0x7f}, {0x80000000, 0x0, 0x73c}, {0x1000, 0x7fffffff, 0x3}, {0x7fffffff, 0x6, 0x401}, {0x8, 0x1, 0xe7}, {0x1, 0xffb, 0x6}, {0x3, 0x80000001, 0x3d}, {0xfffffffe, 0x7, 0x3438}, {0x2, 0x101, 0xfffffffc}, {0x1, 0x31b, 0x8b}, {0x4, 0x1, 0x3}, {0x2, 0x0, 0x40bb}, {0xfff, 0x14000, 0x1}, {0xc15, 0xe0000, 0x4}, {0x1000, 0x0, 0x1ff}, {0xa7e3, 0x4c00000, 0x1}, {0x3, 0x4, 0x7429}, {0x9, 0x7, 0x7fffffff}, {0x0, 0x5, 0x4}, {0xbf0, 0x1, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 09:15:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}) [ 1505.714550][T26177] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1505.723279][T26176] usb usb5: usbfs: process 26176 (syz-executor.4) did not claim interface 0 before use [ 1505.733632][T26179] xt_check_match: 15 callbacks suppressed [ 1505.733648][T26179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1505.736245][T26176] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0x2}, 0x10000, 0x84, &(0x7f00000000c0)="0e2591efcc243f54465404f4851883c3a6a8ecdcd99d92b79703be9353ee716f115f1b5aa47ed9daf0f4a13d6b7c4b8e8bc1719e20ee5af37def0d6e49bbdbda6cdc21ad2b56705be9021ba08c7dc698d2d8d38a3e8aebf135d07a197893a35a2220b7ce652078d3570b3d6660a5e3b57d0c6d21494d2dea5dcb82fd9e49e6dd8cca60ecbe62626d4cd1b5d223e3c488741ee1c34317b4cbad8f27acc02bcd9609a8560c17a28a8ac534e2536cb450496f5bc8d1ccbd4867c76efcece676ad4b9ac106f7694fff2f61928574bf5078eb92907c45533dcb93f03c6073904b48", 0xdf, 0xffffffff, 0x5, 0x78, 0x0, 0x1f, &(0x7f00000001c0)="4d24afb656816ec5bd0a38bec64add5ccddbc945f07485fbef137ae1cf4bb74ce0d3c1b813000e4a6a883cb67a9b9cf6156bd867a01a59477942c80ee38c6fde203bbc91070268d8c2bad8585198fe48dee145c6888ed3bee81e84e94d1c47153e630d39bc1e9c26f1634090317f60a9091d8407a1d4aec6f407b441888ef9e74f56e8fe33ba8e6007a059dd6761448b3c4474f2b16b4503012dc4e319ebd2eea4ee097135fee3b79b3d8b1ae4b89d52b23d2612297033dc1fd97d6a4fc60fc59c89c68a04a38bb8ecae927e86e0d1bd03ca9138a8dda13b7e908c232cf2b72cab41", [{0x1000, 0xfffffffc, 0x40}, {0x9, 0x4d5, 0x7}, {0x8, 0x6, 0x7}, {0x6, 0x40, 0xff}, {0x41, 0x6, 0xffffff00}, {0x9017, 0x7, 0x131}, {0x5, 0x6}, {0x8, 0x4, 0x7}, {0xff8, 0xfffffff8, 0x101}, {0x5, 0xd4, 0x8}, {0x4, 0x0, 0x5}, {0x7, 0x1, 0x9}, {0x2, 0x6}, {0x8, 0xfffffffb, 0x7}, {0x5deb, 0x100, 0x6}, {0x7, 0xebf0, 0x80000000}, {0x5, 0xf692, 0x33a2}, {0x3, 0x1, 0x6}, {0x7, 0x9, 0x2}, {0x4, 0x66187f3b, 0x5}, {0x3ff, 0x101, 0x6b7e203e}, {0x0, 0x5, 0xce}, {0x9, 0x80, 0x7}, {0x8, 0x9, 0x1000}, {0xa65, 0x5, 0xa1}, {0xffffffff, 0x0, 0x9}, {0xfffffeff, 0x491c, 0x3}, {0x9, 0x3, 0xd212}, {0x1f, 0x3, 0x1}, {0x1, 0x8, 0x6}, {0x7, 0x46, 0x3}, {0x5, 0x0, 0x1}, {0x3, 0x400, 0xfff}, {0x4, 0x5, 0xce1}, {0x1000, 0x2, 0xffff}, {0x0, 0x1, 0x6b}, {0x2, 0x1, 0x3}, {0x541bcb0c, 0x800080, 0x6}, {0x401, 0xc8, 0x182c00}, {0x8001, 0xfffffffe, 0x7}, {0x400, 0x0, 0x7}, {0x3ff, 0xffffffff, 0x7f}, {0x8, 0x401, 0xfffffff7}, {0x401, 0x3f, 0x6}, {0x0, 0x1, 0x10001}, {0x8, 0x200, 0x672d}, {0x2, 0x8, 0x956}, {0x81, 0x1, 0xffffffff}, {0x8001, 0x20, 0x1}, {0x7ff, 0x8, 0x7}, {0x4, 0x1, 0x687}, {0x7fff, 0xffffff01, 0x400}, {0x5, 0x8}, {0x6, 0x7, 0x80000001}, {0x7f, 0x400, 0x8}, {0x2, 0x95cf}, {0xd9a9, 0x5, 0x400}, {0x9}, {0x7, 0x672, 0x1ff}, {0x400000, 0x9, 0xfffffc00}, {0x80000000, 0xef6b, 0x80000000}, {0x7e0, 0x29, 0xfffffffc}, {0x2, 0x8000, 0x3ff}, {0x401, 0x4c000000, 0x1f}, {0x400, 0x8, 0xffffffff}, {0x7, 0x4ff8, 0xaf41}, {0x3, 0xcf8f, 0x400}, {0x9, 0x2, 0x8}, {0x7, 0x4d5, 0x6}, {0x6d, 0x0, 0x7}, {0x1, 0x2, 0x8000}, {0x3f, 0x400, 0xa61}, {0x3, 0x0, 0x3}, {0xffff, 0x101, 0x9}, {0x7f, 0xffff0001, 0x2}, {0x2, 0x6, 0x4f0}, {0xf854a91a, 0xfffffffe, 0x100}, {0x0, 0x80000001, 0xe39}, {0x4, 0x1d9ac091, 0x101}, {0x5, 0x8, 0x5}, {0x3ff, 0x1000, 0xc8}, {0x8, 0x4, 0x401}, {0x0, 0x8, 0xec9}, {0x200, 0x1, 0x800}, {0x7fffffff, 0x8, 0x7f}, {0x1, 0x9, 0x2}, {0x400, 0xd8, 0x6}, {0x80000000, 0xffff, 0x4}, {0x1, 0x200, 0x8001}, {0xf2, 0x400, 0x100}, {0x2, 0x218, 0x101}, {0x0, 0x100, 0x9aa}, {0x40, 0x3ff, 0x20}, {0x7fff, 0x7ff, 0x3}, {0x7, 0x6, 0xffff0000}, {0x9, 0x20, 0x6f82d296}, {0x85, 0x1000, 0x44f2}, {0x100, 0x5}, {0xb02, 0x4, 0xffffffff}, {0x2, 0x5, 0x4}, {0x3, 0x7, 0x7f}, {0x80000000, 0x0, 0x73c}, {0x1000, 0x7fffffff, 0x3}, {0x7fffffff, 0x6, 0x401}, {0x8, 0x1, 0xe7}, {0x1, 0xffb, 0x6}, {0x3, 0x80000001, 0x3d}, {0xfffffffe, 0x7, 0x3438}, {0x2, 0x101, 0xfffffffc}, {0x1, 0x31b, 0x8b}, {0x4, 0x1, 0x3}, {0x2, 0x0, 0x40bb}, {0xfff, 0x14000, 0x1}, {0xc15, 0xe0000, 0x4}, {0x1000, 0x0, 0x1ff}, {0xa7e3, 0x4c00000, 0x1}, {0x3, 0x4, 0x7429}, {0x9, 0x7, 0x7fffffff}, {0x0, 0x5, 0x4}, {0xbf0, 0x1, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 09:15:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf603], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:32 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 2: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}) 09:15:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf803], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0x2}, 0x10000, 0x84, &(0x7f00000000c0)="0e2591efcc243f54465404f4851883c3a6a8ecdcd99d92b79703be9353ee716f115f1b5aa47ed9daf0f4a13d6b7c4b8e8bc1719e20ee5af37def0d6e49bbdbda6cdc21ad2b56705be9021ba08c7dc698d2d8d38a3e8aebf135d07a197893a35a2220b7ce652078d3570b3d6660a5e3b57d0c6d21494d2dea5dcb82fd9e49e6dd8cca60ecbe62626d4cd1b5d223e3c488741ee1c34317b4cbad8f27acc02bcd9609a8560c17a28a8ac534e2536cb450496f5bc8d1ccbd4867c76efcece676ad4b9ac106f7694fff2f61928574bf5078eb92907c45533dcb93f03c6073904b48", 0xdf, 0xffffffff, 0x5, 0x78, 0x0, 0x1f, &(0x7f00000001c0)="4d24afb656816ec5bd0a38bec64add5ccddbc945f07485fbef137ae1cf4bb74ce0d3c1b813000e4a6a883cb67a9b9cf6156bd867a01a59477942c80ee38c6fde203bbc91070268d8c2bad8585198fe48dee145c6888ed3bee81e84e94d1c47153e630d39bc1e9c26f1634090317f60a9091d8407a1d4aec6f407b441888ef9e74f56e8fe33ba8e6007a059dd6761448b3c4474f2b16b4503012dc4e319ebd2eea4ee097135fee3b79b3d8b1ae4b89d52b23d2612297033dc1fd97d6a4fc60fc59c89c68a04a38bb8ecae927e86e0d1bd03ca9138a8dda13b7e908c232cf2b72cab41", [{0x1000, 0xfffffffc, 0x40}, {0x9, 0x4d5, 0x7}, {0x8, 0x6, 0x7}, {0x6, 0x40, 0xff}, {0x41, 0x6, 0xffffff00}, {0x9017, 0x7, 0x131}, {0x5, 0x6}, {0x8, 0x4, 0x7}, {0xff8, 0xfffffff8, 0x101}, {0x5, 0xd4, 0x8}, {0x4, 0x0, 0x5}, {0x7, 0x1, 0x9}, {0x2, 0x6}, {0x8, 0xfffffffb, 0x7}, {0x5deb, 0x100, 0x6}, {0x7, 0xebf0, 0x80000000}, {0x5, 0xf692, 0x33a2}, {0x3, 0x1, 0x6}, {0x7, 0x9, 0x2}, {0x4, 0x66187f3b, 0x5}, {0x3ff, 0x101, 0x6b7e203e}, {0x0, 0x5, 0xce}, {0x9, 0x80, 0x7}, {0x8, 0x9, 0x1000}, {0xa65, 0x5, 0xa1}, {0xffffffff, 0x0, 0x9}, {0xfffffeff, 0x491c, 0x3}, {0x9, 0x3, 0xd212}, {0x1f, 0x3, 0x1}, {0x1, 0x8, 0x6}, {0x7, 0x46, 0x3}, {0x5, 0x0, 0x1}, {0x3, 0x400, 0xfff}, {0x4, 0x5, 0xce1}, {0x1000, 0x2, 0xffff}, {0x0, 0x1, 0x6b}, {0x2, 0x1, 0x3}, {0x541bcb0c, 0x800080, 0x6}, {0x401, 0xc8, 0x182c00}, {0x8001, 0xfffffffe, 0x7}, {0x400, 0x0, 0x7}, {0x3ff, 0xffffffff, 0x7f}, {0x8, 0x401, 0xfffffff7}, {0x401, 0x3f, 0x6}, {0x0, 0x1, 0x10001}, {0x8, 0x200, 0x672d}, {0x2, 0x8, 0x956}, {0x81, 0x1, 0xffffffff}, {0x8001, 0x20, 0x1}, {0x7ff, 0x8, 0x7}, {0x4, 0x1, 0x687}, {0x7fff, 0xffffff01, 0x400}, {0x5, 0x8}, {0x6, 0x7, 0x80000001}, {0x7f, 0x400, 0x8}, {0x2, 0x95cf}, {0xd9a9, 0x5, 0x400}, {0x9}, {0x7, 0x672, 0x1ff}, {0x400000, 0x9, 0xfffffc00}, {0x80000000, 0xef6b, 0x80000000}, {0x7e0, 0x29, 0xfffffffc}, {0x2, 0x8000, 0x3ff}, {0x401, 0x4c000000, 0x1f}, {0x400, 0x8, 0xffffffff}, {0x7, 0x4ff8, 0xaf41}, {0x3, 0xcf8f, 0x400}, {0x9, 0x2, 0x8}, {0x7, 0x4d5, 0x6}, {0x6d, 0x0, 0x7}, {0x1, 0x2, 0x8000}, {0x3f, 0x400, 0xa61}, {0x3, 0x0, 0x3}, {0xffff, 0x101, 0x9}, {0x7f, 0xffff0001, 0x2}, {0x2, 0x6, 0x4f0}, {0xf854a91a, 0xfffffffe, 0x100}, {0x0, 0x80000001, 0xe39}, {0x4, 0x1d9ac091, 0x101}, {0x5, 0x8, 0x5}, {0x3ff, 0x1000, 0xc8}, {0x8, 0x4, 0x401}, {0x0, 0x8, 0xec9}, {0x200, 0x1, 0x800}, {0x7fffffff, 0x8, 0x7f}, {0x1, 0x9, 0x2}, {0x400, 0xd8, 0x6}, {0x80000000, 0xffff, 0x4}, {0x1, 0x200, 0x8001}, {0xf2, 0x400, 0x100}, {0x2, 0x218, 0x101}, {0x0, 0x100, 0x9aa}, {0x40, 0x3ff, 0x20}, {0x7fff, 0x7ff, 0x3}, {0x7, 0x6, 0xffff0000}, {0x9, 0x20, 0x6f82d296}, {0x85, 0x1000, 0x44f2}, {0x100, 0x5}, {0xb02, 0x4, 0xffffffff}, {0x2, 0x5, 0x4}, {0x3, 0x7, 0x7f}, {0x80000000, 0x0, 0x73c}, {0x1000, 0x7fffffff, 0x3}, {0x7fffffff, 0x6, 0x401}, {0x8, 0x1, 0xe7}, {0x1, 0xffb, 0x6}, {0x3, 0x80000001, 0x3d}, {0xfffffffe, 0x7, 0x3438}, {0x2, 0x101, 0xfffffffc}, {0x1, 0x31b, 0x8b}, {0x4, 0x1, 0x3}, {0x2, 0x0, 0x40bb}, {0xfff, 0x14000, 0x1}, {0xc15, 0xe0000, 0x4}, {0x1000, 0x0, 0x1ff}, {0xa7e3, 0x4c00000, 0x1}, {0x3, 0x4, 0x7429}, {0x9, 0x7, 0x7fffffff}, {0x0, 0x5, 0x4}, {0xbf0, 0x1, 0x4}]}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) [ 1505.761380][T26181] usb usb5: usbfs: process 26181 (syz-executor.3) did not claim interface 0 before use [ 1505.786194][T26188] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1505.787325][T26190] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1505.834518][T26195] usb usb5: usbfs: process 26195 (syz-executor.3) did not claim interface 0 before use [ 1505.848322][T26199] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1505.859546][T26201] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xfa00], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:33 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$snapshot(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000002380)=0xc) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14, 0x80000) r9 = geteuid() stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) write$snapshot(r11, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x18, 0xf, &(0x7f0000001c80)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @alu={0x4, 0x0, 0x9, 0x7, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}], &(0x7f0000001d00)='syzkaller\x00', 0xc33, 0x0, 0x0, 0xe4eaa39d2144a8d9, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0xc, 0x2, 0x101}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001e00)=[{0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x6, 0xc}, {0x1, 0x3, 0xd, 0x7}], 0x10, 0x3}, 0x90) r13 = syz_io_uring_complete(0x0) r14 = gettid() stat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) r17 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r17, 0x3305) write$snapshot(r17, 0x0, 0x0) r18 = gettid() setpgid(r18, 0x0) sendmmsg$unix(r6, &(0x7f0000002240)=[{{&(0x7f00000002c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)="f9bdb66c1f97dd776bbd868c729cbab29de7a01bf7f85b2c35b3bbcfb1bb10a1380a34a359d0407027a01eabb387dd5f5c7890554e642cbca84d1bcafcf6bd0b0e25d67045fd84e21d06d036439ce582d38bcb8a5b7b8620a0bfb255e671d44c84b6f7e606fe2c5bc0ebf8355ec50c55ea216c8ca776f571898166ab138a349f6c9b9469e34b9c2fb677af66bd2e8dbb7cf75316e61e145694a480d4f375a85ed4de13bfb89f3341ba0283ce722a50de875b551061ecb83fced206c4bcefd8c73774abc6574c18f1f53807fe320efaf638ed02aaaa540877b3fda73352df7aa7a921fa313b05196fe5dec4eb36ee79022f3b2f1c5ebb0a6ca150e6588b055dced273f7b46cc94e9c12507d946b3e277bfd72699a23c78f4b4d669b780aa5387fe48ac5c13bf122a48b2a615b90e5b39e14c1ceb0b8f99da56c61e1831c44063af31fd2a93434ac6a0e0cd64b5f888189f11cdfa2ebb0dbb978b5b793e35a393a099f4d537610c2a7d3ca75a6e09d3caf821a422845b40fc3bbe03814806859de8a9b1f843ba34f165fb7d5111eb24627332ec1fa8f634ca230dd2a3229289b2f5d9efa47a0091f1ea432b2a41ddbce773bc4519c7925d6e07c2f4ebf7bd01fc8a1c5dcb871b985531f057da3b9f8f97a7f5227b2b803fcf21a2a2b8f15ddd16ceef5a7a275d462a03849321fe349def5719c70d2b3b04cbd08c66f79c5262c95f712d2796c40d5e2e02d1e4c61d2af1e43f010657bfa8631993d65dcdb9bc20336163f34317dffde13015c91d9809a1ae12c5ff2ec6dc0017aea963585e8001de81b2f5c8f04f4d6a84823bbb7ae0bf245074cf1bd004087356d8b97ef5b187a47a788fe3ac8284677ff412a309e0dd621aaba454bd13df75a8f9a2661f03e75bab7be9cf886243664da8cec9c5ec8b5571bf06de86760f8647b81d207dcbd544c0a9f06f8134669a901146dcf0faa6ebb292956c3262ac0de57879916f228532d33ab579aa68097cb7465ad84882509e90d51832f672b0fd485b1902ded97661514bb0afd5433b269ca91e9bea3984e64420c8ec1892bf644b91e26958ba7b3d3845b2971e7f107bf8c95e2a31505b4f14c2334652580a3b5e7f2db3c3999e792eeb668b193eb7b6aa03c98ebd591faf139c1ea893af4b3dbbb35ae715428443bdb5e9af705dca5e03ed6cd24feea305918378d18997196268ea1afc0157cdd663cbcb9bb0b9d53d8b301f7d517d715ecb042acc6ca1475ad13784bd0691df261e66bf6366e75c821bbea2a0c158f533689687795962c9198455da831a298bbd529c524a295d16e043ac6e15a8866ae702cad8bb7d3cdbe1e6195f8c80849b30e087d9f6685cefd8a53fe683652a2ab6d705bf00ca96a3c770489e616dd66b0a408918c277e7d8bc7aa97cf427315ca95d60f4b6e49f7649093fcba1159d2f6ec5f89ad98e0a8d028f75d3c026302e3782520d54e48c76d360e4b10b2c3dda679cd0594eeea789fa9338aabd335b31939baa16e6bae8506a695305275bd4280f099db36bfebda2dfc0eda18f84f4999e1acae124a44c3e56c4fb89bf35094e2422c91a4ceee7c51c445db02816f33c0cd77a137b3423d36913d90dd92971b0d2c2ce57429c6a827770aa451cb6b84fe1fc0d95764f670efb2b8f170120d33786e66e5f77c8a6cd4d9bb0115573c95ddc3221b8225e31d07dc90d2b63d7303ad56f92be754df1a44be608cc696d6df6a5dc94ec970a37d288c257a5f5975c85c622c0c547631e0ce1603f12544de93becc95767af48776e106497c9eab00c862d535dc075eb4b3a065a401ccc9bcc88d1f15b54dd4c2a18628b090732e2ab63016237dba7bcfdf93e29cbccf98d8cdc7b3ca5134fc19fa4d255ac3b8996a9cc92ef5c59fc39e60efd0377eeef50d0ba7c2fc289cc0ebe11fe61b3570a3a0031d1d3dd61ff93b4b837101325cb1f805852e6560f6c94e913238b620173c1b56c6af84df53ca9fbda7d7ced57bb224910c46ed176eae1e7984e2acb916a5f4b0c0da7d5ad15c409c512e8985156efd3d8c90a6f4fe91ed2192627a6bc12ad41afc1a7fdbd78ec236f5badd87a7ce1488f05e98a5f2b26855c75836ac5c2fb4c84051c9bf8438e66c9fe4774f8775e8c9fee5caa3a2eaa2c2791373ac23c8dd9a68e891b91810c6f57b1ccd2ad72711ae398f82c093da2c73d201fa9ccad41270d7969cb41bd2a2c02bda2618c7c6d0d524a071138964e50b57986c82d2adff8872cf455778b379a5c1f7bc2a062caf3532a03d4033e8bb03f183cdf28f48c804f8064caac07d68bc0a16445737d3a6837b423e122468c0a98291bc12e4208f9e7e5333fa4fe141ee3b65c362f34df034908050f34a0150a5643d07204a38f5a481a62224d659894c7692bdc5b166ef8d916c8890a515202609a1e725786603df80b9224ac2ec0d3fe5d73e7dec315d94e773bbb78f19cbf8c8324abb1a3ee922b51c430dcfb85a90cdd2fd8877c8b3b2e8002a20237ba8d51e57d5e76294a8603864cbc1202c56769c35158903605dbb5e8a0314defb2dced10bee84674a2bbf0532ba691473f47132328ec033a0b37dcea0e56525bf4fcb4d515486723d8e2d3850adc58abb45b3225b8992c7b141be540745c04c002a5bac0a745bd507f4110a677d459fe89b5b68968499bc4c1056230dbb997e831eefe4baa7b8866289d7999ebff98df447548b1e4d8cabbced565249a468f669dc8f1395297cfc5deab9638545efb6e9623f769cbbf51658449c677ecebee5c13ba83292c72d6851690cabce42a889e060a3970bd343d6716b890de61a1813117e3f789cf855ba078824436c520e812ed673cf9608c66e3fd0f668a334b1bbee32df73798b132d6c78738d665bfb7d6418fa04a8dceb565fd235f1de59ca520e4ee8d917a0d7b3d77a59d5de66daa3a1322388af9396527cd31b1d9ed8ad1b7dc8bcc969deebf0e769f4ce9760699d0b2befafc5a0dcfc5a068d1302f44fb02d7ebec79607ac5aa54ca9a6e6c15ed012f5a6787a354b82e7b62ea08c27111fcb5c6e5d63334e6ecfbce8ecc0c2d76c20434ac90bd36e7f5738ad780bb2495e73009fecf7a1203aaa45602698a01d1c700e9d87d0c02fa8ab921c5aa1c579d871ec53c2438e4b3ddf5c3ca2b3288f3b4d7e45be77eaff010fd5e54fe9e16710498ae235541eb7636610e9dc41e069fa55ffb9a53cffeba3aa3c18a4945f9d10d2d43ab0d7b753ff63e4519c8bc80a0b443aa971313f3c791cf90ae015f600109d8b229bebcd5551593e53ee13281cb6604d33c017948c08116c62cc9195f6f46f9afa56d36aadd43b9e883860aba866760e958ec6f156b3a39a51f4f9b784e546e14a4685ad0370a5bb3ef2dfc4147c06a31af3dd1f0b0cb860aa34aafa9f59fee1c7b267fe9d95ada7bb605bf63b84143c8fa0eb2466ef224c8a88d126e796bcec919b1e9245ab0d8570fe25d13c04a32622fa758969d17b6999676c58ec1e47ccbba8fb2b95369dbd9d83d7e6646274cd55e947dd4b974e3580495e4da712593d6200653070628ae66f840ee36e5c589e150183e1c97451bd623281aad7d2d6e5134fceb8fb498d64a09ee984168772114ad76ccccdab43ff4bd06b49adcc47ec6d3b395fa88ee328a4d923be7fe17141232d6e2ea4c6bce34c39092c3c2d35a0c6cfb86d4e949135b0ce1fa01725cae269905e99d9eca431072c6c1266969855810f1ada1ec22c1727b74ff435e9fe40e5f22370036243daac1c4ba91722caef7d3294b4d2e3871236889b859d418b21697745fd501969c9c459390912b94dd106f87ed7144e58161b21e83bc3f3c2ab9b563cfa8ea0b19b9873f275816a8262eeb80122e40e1d250f8029ca29ff13ee4435de47ae7deccb5d29abe80630bee22bb81c964c1a543622410c35b9c856a4066ed4d4afc79a375e7a365741e15cf78a0da2a31c74b9b1e4fad39fc747e1746ce30ffd60a6dcaabe4163635d8873c5d48e65b70aac087fa2fff9fa85fb4a8dabe4253860b764c8788eba8acfc96b5376784b26920ad6a6bf8d1a7227922def4502cfa411f9d1a9da442ebcb0e9f905934148b1983cd0f6ce92f4761eabd041c7b34e57533bbc36f73dad5005d37420dcd1bf78c25da196c9bf4567607870feb094c721bce44fe9dec71d91790ddb86783de1f2d18cb8f1012505e16f88c7e360cde9d58ab8e8aa0b14d96c210ad40cf121033f6a335bf08d783707f2870e9d56cbd70d2f9c6fc85aba7ac92428e0dba0ab337bdd5c24a82cb91fe66c1a6c4d8317dd83856e67debff467f4cc75b4e73f24001980bd4d0b36844c735ce5087ef200970b7597dd53195053c0bd0f139c1d680ea534fe63792d9527c8c5d155c9af1b6cb14f59e188c9004ca00ddf38ad8d1114969aeb9ed34c867228e627678155f959159ae3c839d84038f245fe77403f13bacaed9f5d7148c3c9444322fb44dcff0d155ddb3c1cc73adca14366983d7d0013f6e5366461101afc2c317614974e4aff643f7e40edd0d2eb8295961837ce680215b54e19ffb8fd6834b644ef4517d6d6bbdf76bebf1e6d386b7708de49f27aa70897b6cf10615b090f55204bb9ff149107a2ae0e070cd8214f2abd778bd0ea7faaf0b6aea550f53f180ab04a4a52e5a884954625e90165c2329fbaec734601eef1d1de858300a7302be78e20503e7b1e8fba3258e57f28facddddf48f737f3227b1a92bdedd3421b7dbfd0fd58d1fbafbc2321c9c1a3d87e2df883b48182cbb1b9cba39004c9d535066963833e1b61e6c45e3523fd4e83deb30a431ff18ef79d76895495ac34ace000392772e3234f111b70c9491bb2ab2626ccb7e8cfd342b618c2655bde1bc035619d8df34322a23974ae4affdcefcaa5cbf69dca8b0f9a71926f1524007bea451214c2855d399d0c130f87f8f344e6ba181eb04a82865f886ff7b06d8d5212e456174849a5fc41d1fb4354edc64d0fab0ee2c940278abf8d54654345d7c7524082c79bbb2720970b3c8e40a08d6d6e87b925e536c28734d87a104d38260e074732ba679d4c4030d779aaba889098da135135bb9b127142bb89c21522e55db630ec54eb7d9ec30e015117895b17a74e0b40a5a0ac9e0305778c1948c9f67bc3bfeb4865d137985f4f372733824ff831ca027c1d4bc3631c7b6681ab4159829af73b9913c111f12603120e66a8aefd876c9d0f4dc3904c32f44519d44377b1da74ebf8228097eb3ff30672a4ee25de68614241d53b80553739d45f4d1d4b6261f38cf25d1f1f8469af0b76374ffd41b4dc8a108b03c471f467fab26cf840b70e2bfd3a19f526829474e54b33cc34c72eb427bdaf86c7a61038b732a7b5fde0493cdd85f7618f728a23ccd3a63115aab3d4d518dfd28a8f22adc18aa840588bd5a33efd152a4e995eefb8f0ce0d56944673be3a99b08fc6e7386f2f79cae9eca1ea697180759a27034a5d37d11d2fbe7f065aa9cc774d8943b9f108c52fab0de76715f0efebfe83ac890dd33e31cb5c3ef55fa534d8183987512015adb682f6285cb1919c6d8a3e82ab3598da90c0827c67d41ae10af80514a11da5cb547bf119042c6e0da6958cfbef1867e396e64f2f086c6faca302639df9bfa902a8b8fa146fcba6c51456e23bfb9709834a6ccf4115fecf124fae1722e038600be483aa21b416b1836f2714820fd8c4fc88abebde34f7b422e9c86938ac374aa712e8f5fc9051b5b0f3a869df84e7013183a4c78614327b50827129e31d92e2f7a6ac00ef", 0x1000}, {&(0x7f0000001340)="9e3d0c279c36bc48829c853f45edc1ef4798b0ad21cde7685d5c5f69789d8a07833facd198e37cc31d3f18f998b0cc33b2a80059b457afa17da9e581fe02cdf665f397e495804832a8539c1995a08dfb27b273325c26995b0b653fd2a370b0c6428119481000fbda9d3e4e5d0a79916c2cafdfccfa0b6e4bbbc0ee77b268bcc09880ce070666b8a700e3fbcafc59aacd1aaba99a038808", 0x97}, {&(0x7f0000001400)="11aa0f1a51d241e33c62b2d421f32b51a0e9c516ebe8f18877735ea17d424bdccc06c67caf11902340d41a34ee9f08bae20a16bec4647514bc5909c829ad0773398660ca2c1934bad4085d3f1edb39ccf050573fd127f03148e0a3b3e4341f7de606bb1207909a6f06dbd9ee93ca31f5e861dd7ad7759a63af008f97e92841c254936a4228dbe46e1a442206191a3492238e1da05a398d4be5bd0a4f1524781a2061357536c394421a8b7c802a56d292539856d31badc9ef83ba91570af07201de72bdd49da225754bd1221417686862f9864562aa4a76d247", 0xd9}, {&(0x7f0000001500)="2f74a5872af04773eb12e2c6d6e21757433f69ea7e6e7d0d128838e50a11c1f86e7ed6acf1e331124a99b8192e5623115c4692fd354f9f6fbf85aa591cc3b3d2eacea9ae48c84576a888567bc7f91f943a57d30b5e486e9b97901c8929557538dabaf484abfb0f432cd10a0aa0b84921300c43eec3698ecc3ad9bd371d7101", 0x7f}], 0x4, 0x0, 0x0, 0x1}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001640)="df488729bb124f9eaeb4a00915f32c5be4c1773210685be5b1ed", 0x1a}], 0x1}}, {{&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)="b5c541f15146a81de2a77667f18646066cfda80f6322fd7e92435f3f6bb9ebd51720f04ea08d8df74123607ec3e53bd6236c9f097c74", 0x36}, {&(0x7f0000001780)="7224d0692e8923a4e0e4fe434db4bd80c2a014a69ebbe2208a3ac7f8c0e84f6c7d704b03777bcfcaa091092a17d173c68683be0d724c2b4c8b7cbd6c68acd2cfd9bf50350207c4a22dc3aead880df80c5342d7e2d4373548c1058edff617c28210b12b5c2f11ea912fbb2edfda9df04ea855b910467cb4a4a441518261e65598d283df9f7cbdf999cf46220f147224db8c1cab0ad61fb3bb7225587c08434b9213a4cbca723d201ca25ea9b2575890bfb7c8d958a16fa11b80fa39156258eb730efdf57c2b0598b5349210", 0xcb}], 0x2, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r7]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38, 0x20004000}}, {{&(0x7f0000001980)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a00)="38d7d83be1d56d9d0b641dca533ce8c3518bf8cc67ff8a5cf79cf99d19b0e5835b216133e797fc6e9f9326d4caa558153b699aacd44ec524adf323520f37e953c72eeac49b0d185f1949cd49e19630001ec3b394151cfc52282aadb5878fd380bb9f53c85fab0ac8b59d98145e1ba4374143654ad6d9bc4da230f1b9c2bbed2102c4336152e6adda0660af5014a29401ae3c5ce7fc677592da3864a6dc048ccefaf4aa63ac0f5964a12a4659511c5402db37ce3963", 0xb5}, {&(0x7f0000001ac0)="517b31b97d53232d014587d28d51f9f192368ca4fd11b740579b98d6d47d769d573bda8848b8eef563ea9199c894cce70f12bf28cfff14530f5dd41e542aa90c9fc47951cd8e087657678a372d2e35229f8140cad94a7c951d295d1e414dd215ac6e871a49e6804702bd45e3a27f1f7aaa972a86955bd346021e069d090b049c771b08eb9d95177de6a59823d0782ea922f040d70f90fa8a686ecda5a7bb9852261209b6984e13a14b213b2f64dfbc8d5b52417e294d", 0xb6}], 0x2, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r3, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r0, r11, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r15}}}], 0x80, 0x20000004}}, {{&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002140)=[{&(0x7f00000020c0)="01ae61491b1fad0de6ace6973cb592d9c4329d77d28baf7288d7678af71800e8499cbc533fa40acca46c679e11e350009289e1a8f22ef92a08004e2c5dbd491c3c6810bdbad9337361b0f60037216a9bcf201bd5a3bc2afd3ed93ec577f9e701b3165dca14f5a90c0f0852f5e438f4310b567fea39", 0x75}], 0x1, &(0x7f00000021c0)=[@rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r4, r5}}}], 0x50}}], 0x5, 0x0) setreuid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1020082, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@access_user}, {@msize={'msize', 0x3d, 0x76e}}, {@mmap}, {@uname={'uname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@mmap}, {@uname={'uname', 0x3d, '}/\xc4(!\''}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '*'}}]}}) r19 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r19, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) [ 1505.878561][T26197] usb usb5: usbfs: process 26197 (syz-executor.4) did not claim interface 0 before use [ 1505.900950][T26210] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1505.912273][T26197] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1505.919812][T26209] usb usb5: usbfs: process 26209 (syz-executor.3) did not claim interface 0 before use 09:15:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}) 09:15:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xfa03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1505.941757][T26214] usb usb5: usbfs: process 26214 (syz-executor.5) did not claim interface 0 before use [ 1505.963782][T26214] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1505.971081][T26217] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1505.978623][T26220] usb usb5: usbfs: process 26220 (syz-executor.3) did not claim interface 0 before use 09:15:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xfe03], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}) 09:15:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1505.985587][T26225] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1505.988643][T26222] usb usb5: usbfs: process 26222 (syz-executor.4) did not claim interface 0 before use [ 1506.017482][T26227] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:33 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) write$snapshot(r1, 0x0, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000002380)=0xc) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14, 0x80000) r9 = geteuid() (async) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) (async) write$snapshot(r11, 0x0, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x18, 0xf, &(0x7f0000001c80)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @alu={0x4, 0x0, 0x9, 0x7, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}], &(0x7f0000001d00)='syzkaller\x00', 0xc33, 0x0, 0x0, 0xe4eaa39d2144a8d9, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0xc, 0x2, 0x101}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001e00)=[{0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x6, 0xc}, {0x1, 0x3, 0xd, 0x7}], 0x10, 0x3}, 0x90) (async) r13 = syz_io_uring_complete(0x0) (async) r14 = gettid() stat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) (async) r17 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r17, 0x3305) write$snapshot(r17, 0x0, 0x0) (async) r18 = gettid() setpgid(r18, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000002240)=[{{&(0x7f00000002c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="9e3d0c279c36bc48829c853f45edc1ef4798b0ad21cde7685d5c5f69789d8a07833facd198e37cc31d3f18f998b0cc33b2a80059b457afa17da9e581fe02cdf665f397e495804832a8539c1995a08dfb27b273325c26995b0b653fd2a370b0c6428119481000fbda9d3e4e5d0a79916c2cafdfccfa0b6e4bbbc0ee77b268bcc09880ce070666b8a700e3fbcafc59aacd1aaba99a038808", 0x97}, {&(0x7f0000001400)="11aa0f1a51d241e33c62b2d421f32b51a0e9c516ebe8f18877735ea17d424bdccc06c67caf11902340d41a34ee9f08bae20a16bec4647514bc5909c829ad0773398660ca2c1934bad4085d3f1edb39ccf050573fd127f03148e0a3b3e4341f7de606bb1207909a6f06dbd9ee93ca31f5e861dd7ad7759a63af008f97e92841c254936a4228dbe46e1a442206191a3492238e1da05a398d4be5bd0a4f1524781a2061357536c394421a8b7c802a56d292539856d31badc9ef83ba91570af07201de72bdd49da225754bd1221417686862f9864562aa4a76d247", 0xd9}, {&(0x7f0000001500)="2f74a5872af04773eb12e2c6d6e21757433f69ea7e6e7d0d128838e50a11c1f86e7ed6acf1e331124a99b8192e5623115c4692fd354f9f6fbf85aa591cc3b3d2eacea9ae48c84576a888567bc7f91f943a57d30b5e486e9b97901c8929557538dabaf484abfb0f432cd10a0aa0b84921300c43eec3698ecc3ad9bd371d7101", 0x7f}], 0x4, 0x0, 0x0, 0x1}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001640)="df488729bb124f9eaeb4a00915f32c5be4c1773210685be5b1ed", 0x1a}], 0x1}}, {{&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)="b5c541f15146a81de2a77667f18646066cfda80f6322fd7e92435f3f6bb9ebd51720f04ea08d8df74123607ec3e53bd6236c9f097c74", 0x36}, {&(0x7f0000001780)="7224d0692e8923a4e0e4fe434db4bd80c2a014a69ebbe2208a3ac7f8c0e84f6c7d704b03777bcfcaa091092a17d173c68683be0d724c2b4c8b7cbd6c68acd2cfd9bf50350207c4a22dc3aead880df80c5342d7e2d4373548c1058edff617c28210b12b5c2f11ea912fbb2edfda9df04ea855b910467cb4a4a441518261e65598d283df9f7cbdf999cf46220f147224db8c1cab0ad61fb3bb7225587c08434b9213a4cbca723d201ca25ea9b2575890bfb7c8d958a16fa11b80fa39156258eb730efdf57c2b0598b5349210", 0xcb}], 0x2, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r7]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38, 0x20004000}}, {{&(0x7f0000001980)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a00)="38d7d83be1d56d9d0b641dca533ce8c3518bf8cc67ff8a5cf79cf99d19b0e5835b216133e797fc6e9f9326d4caa558153b699aacd44ec524adf323520f37e953c72eeac49b0d185f1949cd49e19630001ec3b394151cfc52282aadb5878fd380bb9f53c85fab0ac8b59d98145e1ba4374143654ad6d9bc4da230f1b9c2bbed2102c4336152e6adda0660af5014a29401ae3c5ce7fc677592da3864a6dc048ccefaf4aa63ac0f5964a12a4659511c5402db37ce3963", 0xb5}, {&(0x7f0000001ac0)="517b31b97d53232d014587d28d51f9f192368ca4fd11b740579b98d6d47d769d573bda8848b8eef563ea9199c894cce70f12bf28cfff14530f5dd41e542aa90c9fc47951cd8e087657678a372d2e35229f8140cad94a7c951d295d1e414dd215ac6e871a49e6804702bd45e3a27f1f7aaa972a86955bd346021e069d090b049c771b08eb9d95177de6a59823d0782ea922f040d70f90fa8a686ecda5a7bb9852261209b6984e13a14b213b2f64dfbc8d5b52417e294d", 0xb6}], 0x2, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r3, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r0, r11, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r15}}}], 0x80, 0x20000004}}, {{&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002140)=[{&(0x7f00000020c0)="01ae61491b1fad0de6ace6973cb592d9c4329d77d28baf7288d7678af71800e8499cbc533fa40acca46c679e11e350009289e1a8f22ef92a08004e2c5dbd491c3c6810bdbad9337361b0f60037216a9bcf201bd5a3bc2afd3ed93ec577f9e701b3165dca14f5a90c0f0852f5e438f4310b567fea39", 0x75}], 0x1, &(0x7f00000021c0)=[@rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r4, r5}}}], 0x50}}], 0x5, 0x0) (async) setreuid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1020082, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@access_user}, {@msize={'msize', 0x3d, 0x76e}}, {@mmap}, {@uname={'uname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@mmap}, {@uname={'uname', 0x3d, '}/\xc4(!\''}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '*'}}]}}) r19 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r19, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x30000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x40000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0}) [ 1506.038155][T26231] usb usb5: usbfs: process 26231 (syz-executor.4) did not claim interface 0 before use [ 1506.055510][T26231] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1506.062879][T26233] usb usb5: usbfs: process 26233 (syz-executor.3) did not claim interface 0 before use [ 1506.066407][T26241] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1506.072967][T26234] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1506.109741][T26244] usb usb5: usbfs: process 26244 (syz-executor.4) did not claim interface 0 before use [ 1506.119729][T26244] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1506.121721][T26245] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$snapshot(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000002380)=0xc) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14, 0x80000) geteuid() (async) r9 = geteuid() stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r11, 0x3305) (async) ioctl$SNAPSHOT_FREE(r11, 0x3305) write$snapshot(r11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x18, 0xf, &(0x7f0000001c80)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @alu={0x4, 0x0, 0x9, 0x7, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}], &(0x7f0000001d00)='syzkaller\x00', 0xc33, 0x0, 0x0, 0xe4eaa39d2144a8d9, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0xc, 0x2, 0x101}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001e00)=[{0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x6, 0xc}, {0x1, 0x3, 0xd, 0x7}], 0x10, 0x3}, 0x90) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x18, 0xf, &(0x7f0000001c80)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @alu={0x4, 0x0, 0x9, 0x7, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}], &(0x7f0000001d00)='syzkaller\x00', 0xc33, 0x0, 0x0, 0xe4eaa39d2144a8d9, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0xc, 0x2, 0x101}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001e00)=[{0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x6, 0xc}, {0x1, 0x3, 0xd, 0x7}], 0x10, 0x3}, 0x90) syz_io_uring_complete(0x0) (async) r13 = syz_io_uring_complete(0x0) gettid() (async) r14 = gettid() stat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) r17 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r17, 0x3305) write$snapshot(r17, 0x0, 0x0) (async) write$snapshot(r17, 0x0, 0x0) gettid() (async) r18 = gettid() setpgid(r18, 0x0) (async) setpgid(r18, 0x0) sendmmsg$unix(r6, &(0x7f0000002240)=[{{&(0x7f00000002c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="9e3d0c279c36bc48829c853f45edc1ef4798b0ad21cde7685d5c5f69789d8a07833facd198e37cc31d3f18f998b0cc33b2a80059b457afa17da9e581fe02cdf665f397e495804832a8539c1995a08dfb27b273325c26995b0b653fd2a370b0c6428119481000fbda9d3e4e5d0a79916c2cafdfccfa0b6e4bbbc0ee77b268bcc09880ce070666b8a700e3fbcafc59aacd1aaba99a038808", 0x97}, {&(0x7f0000001400)="11aa0f1a51d241e33c62b2d421f32b51a0e9c516ebe8f18877735ea17d424bdccc06c67caf11902340d41a34ee9f08bae20a16bec4647514bc5909c829ad0773398660ca2c1934bad4085d3f1edb39ccf050573fd127f03148e0a3b3e4341f7de606bb1207909a6f06dbd9ee93ca31f5e861dd7ad7759a63af008f97e92841c254936a4228dbe46e1a442206191a3492238e1da05a398d4be5bd0a4f1524781a2061357536c394421a8b7c802a56d292539856d31badc9ef83ba91570af07201de72bdd49da225754bd1221417686862f9864562aa4a76d247", 0xd9}, {&(0x7f0000001500)="2f74a5872af04773eb12e2c6d6e21757433f69ea7e6e7d0d128838e50a11c1f86e7ed6acf1e331124a99b8192e5623115c4692fd354f9f6fbf85aa591cc3b3d2eacea9ae48c84576a888567bc7f91f943a57d30b5e486e9b97901c8929557538dabaf484abfb0f432cd10a0aa0b84921300c43eec3698ecc3ad9bd371d7101", 0x7f}], 0x4, 0x0, 0x0, 0x1}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001640)="df488729bb124f9eaeb4a00915f32c5be4c1773210685be5b1ed", 0x1a}], 0x1}}, {{&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001740)="b5c541f15146a81de2a77667f18646066cfda80f6322fd7e92435f3f6bb9ebd51720f04ea08d8df74123607ec3e53bd6236c9f097c74", 0x36}, {&(0x7f0000001780)="7224d0692e8923a4e0e4fe434db4bd80c2a014a69ebbe2208a3ac7f8c0e84f6c7d704b03777bcfcaa091092a17d173c68683be0d724c2b4c8b7cbd6c68acd2cfd9bf50350207c4a22dc3aead880df80c5342d7e2d4373548c1058edff617c28210b12b5c2f11ea912fbb2edfda9df04ea855b910467cb4a4a441518261e65598d283df9f7cbdf999cf46220f147224db8c1cab0ad61fb3bb7225587c08434b9213a4cbca723d201ca25ea9b2575890bfb7c8d958a16fa11b80fa39156258eb730efdf57c2b0598b5349210", 0xcb}], 0x2, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r7]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38, 0x20004000}}, {{&(0x7f0000001980)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a00)="38d7d83be1d56d9d0b641dca533ce8c3518bf8cc67ff8a5cf79cf99d19b0e5835b216133e797fc6e9f9326d4caa558153b699aacd44ec524adf323520f37e953c72eeac49b0d185f1949cd49e19630001ec3b394151cfc52282aadb5878fd380bb9f53c85fab0ac8b59d98145e1ba4374143654ad6d9bc4da230f1b9c2bbed2102c4336152e6adda0660af5014a29401ae3c5ce7fc677592da3864a6dc048ccefaf4aa63ac0f5964a12a4659511c5402db37ce3963", 0xb5}, {&(0x7f0000001ac0)="517b31b97d53232d014587d28d51f9f192368ca4fd11b740579b98d6d47d769d573bda8848b8eef563ea9199c894cce70f12bf28cfff14530f5dd41e542aa90c9fc47951cd8e087657678a372d2e35229f8140cad94a7c951d295d1e414dd215ac6e871a49e6804702bd45e3a27f1f7aaa972a86955bd346021e069d090b049c771b08eb9d95177de6a59823d0782ea922f040d70f90fa8a686ecda5a7bb9852261209b6984e13a14b213b2f64dfbc8d5b52417e294d", 0xb6}], 0x2, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r3, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r0, r11, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r15}}}], 0x80, 0x20000004}}, {{&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002140)=[{&(0x7f00000020c0)="01ae61491b1fad0de6ace6973cb592d9c4329d77d28baf7288d7678af71800e8499cbc533fa40acca46c679e11e350009289e1a8f22ef92a08004e2c5dbd491c3c6810bdbad9337361b0f60037216a9bcf201bd5a3bc2afd3ed93ec577f9e701b3165dca14f5a90c0f0852f5e438f4310b567fea39", 0x75}], 0x1, &(0x7f00000021c0)=[@rights={{0x14, 0x1, 0x1, [r16]}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r4, r5}}}], 0x50}}], 0x5, 0x0) setreuid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1020082, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@access_user}, {@msize={'msize', 0x3d, 0x76e}}, {@mmap}, {@uname={'uname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@mmap}, {@uname={'uname', 0x3d, '}/\xc4(!\''}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '*'}}]}}) r19 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r19, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0}) 09:15:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x76f1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1506.809811][T26248] usb usb5: usbfs: process 26248 (syz-executor.3) did not claim interface 0 before use [ 1506.826172][T26248] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1506.831340][T26258] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1506.835237][T26249] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:34 executing program 3: ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0}) 09:15:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:34 executing program 3: ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1506.851035][T26253] usb usb5: usbfs: process 26253 (syz-executor.4) did not claim interface 0 before use [ 1506.860188][T26260] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1506.866463][T26254] usb usb5: usbfs: process 26254 (syz-executor.5) did not claim interface 0 before use [ 1506.882836][T26254] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1506.915212][T26267] usb usb5: usbfs: process 26267 (syz-executor.4) did not claim interface 0 before use [ 1506.929053][T26267] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1506.939714][T26269] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:34 executing program 3: ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x40f00, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x401, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, r4], &(0x7f0000000340)=[{0x1, 0x1, 0x10}, {0x1, 0x3, 0x3, 0x8}], 0x10, 0x9794}, 0x90) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0}) 09:15:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa100, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:34 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:34 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x5000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0}) [ 1507.676461][T26273] usb usb5: usbfs: process 26273 (syz-executor.5) did not claim interface 0 before use [ 1507.691148][T26273] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1507.700572][T26280] usb usb5: usbfs: process 26280 (syz-executor.4) did not claim interface 0 before use [ 1507.712902][T26278] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x40f00, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x401, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, r4], &(0x7f0000000340)=[{0x1, 0x1, 0x10}, {0x1, 0x3, 0x3, 0x8}], 0x10, 0x9794}, 0x90) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x40f00, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x401, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, r4], &(0x7f0000000340)=[{0x1, 0x1, 0x10}, {0x1, 0x3, 0x3, 0x8}], 0x10, 0x9794}, 0x90) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:15:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xf176, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0}) [ 1507.738867][T26292] usb usb5: usbfs: process 26292 (syz-executor.4) did not claim interface 0 before use [ 1507.753147][T26292] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1507.760927][T26295] usb usb5: usbfs: process 26295 (syz-executor.5) did not claim interface 0 before use [ 1507.774156][T26299] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1507.801366][T26312] usb usb5: usbfs: process 26312 (syz-executor.4) did not claim interface 0 before use [ 1507.812152][T26312] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x40f00, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x401, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r3, r4], &(0x7f0000000340)=[{0x1, 0x1, 0x10}, {0x1, 0x3, 0x3, 0x8}], 0x10, 0x9794}, 0x90) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0}) 09:15:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x82ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:35 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0xb, 0x1}, 0x0, 0x20, &(0x7f00000000c0)="f1cac54045f6613d422e8dbf05e10b82dd4ed93ad0b714f3fde822c099f39ea6a0d4e7b125d44f321d4ef33f3bb85651d18900b7e55e0c3e8b2b667e77d4ef4d8e0ac1d70057ae922425181aef15fb3b55702941715972466e6fb3cbb21b59cb528f70563c2ce5b2f66869ee8072bfab6ec46dbdc18f31adaf9173dd497db03436390d62d818df0b24747f39f7a1daa1aa56d9e7bf81abad865f09ac5dc7984bd1bbf86d2f44fc728231a0d4f57db4d519abcabcbc98a7", 0xb7, 0x101, 0x81, 0x4, 0x1f, 0x7, &(0x7f0000000180)="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"}) 09:15:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1508.538403][T26320] usb usb5: usbfs: process 26320 (syz-executor.4) did not claim interface 0 before use [ 1508.560037][T26320] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1508.567373][T26323] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1508.576953][T26319] usb usb5: usbfs: process 26319 (syz-executor.5) did not claim interface 0 before use 09:15:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:35 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0xb, 0x1}, 0x0, 0x20, &(0x7f00000000c0)="f1cac54045f6613d422e8dbf05e10b82dd4ed93ad0b714f3fde822c099f39ea6a0d4e7b125d44f321d4ef33f3bb85651d18900b7e55e0c3e8b2b667e77d4ef4d8e0ac1d70057ae922425181aef15fb3b55702941715972466e6fb3cbb21b59cb528f70563c2ce5b2f66869ee8072bfab6ec46dbdc18f31adaf9173dd497db03436390d62d818df0b24747f39f7a1daa1aa56d9e7bf81abad865f09ac5dc7984bd1bbf86d2f44fc728231a0d4f57db4d519abcabcbc98a7", 0xb7, 0x101, 0x81, 0x4, 0x1f, 0x7, &(0x7f0000000180)="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"}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0xb, 0x1}, 0x0, 0x20, &(0x7f00000000c0)="f1cac54045f6613d422e8dbf05e10b82dd4ed93ad0b714f3fde822c099f39ea6a0d4e7b125d44f321d4ef33f3bb85651d18900b7e55e0c3e8b2b667e77d4ef4d8e0ac1d70057ae922425181aef15fb3b55702941715972466e6fb3cbb21b59cb528f70563c2ce5b2f66869ee8072bfab6ec46dbdc18f31adaf9173dd497db03436390d62d818df0b24747f39f7a1daa1aa56d9e7bf81abad865f09ac5dc7984bd1bbf86d2f44fc728231a0d4f57db4d519abcabcbc98a7", 0xb7, 0x101, 0x81, 0x4, 0x1f, 0x7, &(0x7f0000000180)="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"}) (async) 09:15:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0}) 09:15:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa0ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1508.615660][T26339] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1508.651146][T26347] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1508.661844][T26348] usb usb5: usbfs: process 26348 (syz-executor.4) did not claim interface 0 before use [ 1508.672114][T26348] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:36 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0xb, 0x1}, 0x0, 0x20, &(0x7f00000000c0)="f1cac54045f6613d422e8dbf05e10b82dd4ed93ad0b714f3fde822c099f39ea6a0d4e7b125d44f321d4ef33f3bb85651d18900b7e55e0c3e8b2b667e77d4ef4d8e0ac1d70057ae922425181aef15fb3b55702941715972466e6fb3cbb21b59cb528f70563c2ce5b2f66869ee8072bfab6ec46dbdc18f31adaf9173dd497db03436390d62d818df0b24747f39f7a1daa1aa56d9e7bf81abad865f09ac5dc7984bd1bbf86d2f44fc728231a0d4f57db4d519abcabcbc98a7", 0xb7, 0x101, 0x81, 0x4, 0x1f, 0x7, &(0x7f0000000180)="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"}) 09:15:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa3ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xa000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x2500, 0x0, 0x0, 0x0}) 09:15:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x78, 0x2000) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000100)={0xf}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1509.407956][T26358] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1509.415310][T26359] usb usb5: usbfs: process 26359 (syz-executor.4) did not claim interface 0 before use [ 1509.438794][T26359] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1509.462170][T26369] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1509.472548][T26371] usb usb5: usbfs: process 26371 (syz-executor.5) did not claim interface 0 before use [ 1509.488147][T26371] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1509.495556][T26374] usb usb5: usbfs: process 26374 (syz-executor.3) did not claim interface 0 before use 09:15:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x2e75, 0x0, 0x0, 0x0}) 09:15:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x1020000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x78, 0x2000) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000100)={0xf}) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 09:15:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xe000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x78, 0x2000) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000100)={0xf}) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 09:15:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x10000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x400) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x3075, 0x0, 0x0, 0x0}) 09:15:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1510.270707][T26385] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1510.278265][T26384] usb usb5: usbfs: process 26384 (syz-executor.3) did not claim interface 0 before use [ 1510.288647][T26384] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1510.296016][T26382] usb usb5: usbfs: process 26382 (syz-executor.4) did not claim interface 0 before use [ 1510.337016][T26397] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1510.344608][T26398] usb usb5: usbfs: process 26398 (syz-executor.3) did not claim interface 0 before use [ 1510.354638][T26398] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1510.361943][T26400] usb usb5: usbfs: process 26400 (syz-executor.4) did not claim interface 0 before use [ 1510.372816][T26400] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000300)={0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe5, &(0x7f0000000100)="3f3f13cf09324aa87cd55066b275e63d962feb8a0c2fce372b47f07593c93024aff9b4887a609203833165310a0e9c942197ce15639d7892d82efe79d55033647cc84e478e040d66ee63d62e7874a88bd605501ec406c863afe902f26d6ba82e20514a38bcac348d48a42cf8fd29809c59b9d0bc6ef5eb1c2668402355b2696fe1f04440a38a14c1feb2670c10abeed4f6c3c291a05e522453725df44dcd9a0d975d5aa12e6a6073be4b704f86147a11ef6742c064dc9b8d5f", 0xb9, 0x2, 0xffffff80, 0x1, 0x1a4, 0x0, &(0x7f00000001c0)="f00e978b3be50dd5fa84bea7709846984cfe7821cf0d235dc0fcfef59a33e1ad797ceff51bb7734dde31ea558a72c1e646371fa507033965257c32b9afc056ed29891e2868c884a8c1021ed5d08651e7a4edfb9bca5e192d9662b6d722022ab852e5480df273b17fd971305d3912c9edcd67363c7ada967910c0cf4de63ad8ed84a2a2b0e5c197dbe0b61f084bd02864804dc5adffc183c9ff5aa1fcfbfa7e5b0234b49be5af37837e0d161813f9899369eef292d21e97b13835aa796420c722b443cce50fbc47591e96140a4b4dad05125dd0eaec1202d8"}) 09:15:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x11000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x1230000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0}) 09:15:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x12000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1511.121817][T26405] xt_check_match: 16 callbacks suppressed [ 1511.121833][T26405] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1511.141496][T26409] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1511.149070][T26411] usb usb5: usbfs: process 26411 (syz-executor.4) did not claim interface 0 before use [ 1511.159960][T26411] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0}) 09:15:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x12010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1511.168688][T26410] usb usb5: usbfs: process 26410 (syz-executor.3) did not claim interface 0 before use [ 1511.179845][T26416] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1511.180495][T26410] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1511.201259][T26408] usb usb5: usbfs: process 26408 (syz-executor.5) did not claim interface 0 before use [ 1511.204389][T26419] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x18010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000300)={0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe5, &(0x7f0000000100)="3f3f13cf09324aa87cd55066b275e63d962feb8a0c2fce372b47f07593c93024aff9b4887a609203833165310a0e9c942197ce15639d7892d82efe79d55033647cc84e478e040d66ee63d62e7874a88bd605501ec406c863afe902f26d6ba82e20514a38bcac348d48a42cf8fd29809c59b9d0bc6ef5eb1c2668402355b2696fe1f04440a38a14c1feb2670c10abeed4f6c3c291a05e522453725df44dcd9a0d975d5aa12e6a6073be4b704f86147a11ef6742c064dc9b8d5f", 0xb9, 0x2, 0xffffff80, 0x1, 0x1a4, 0x0, &(0x7f00000001c0)="f00e978b3be50dd5fa84bea7709846984cfe7821cf0d235dc0fcfef59a33e1ad797ceff51bb7734dde31ea558a72c1e646371fa507033965257c32b9afc056ed29891e2868c884a8c1021ed5d08651e7a4edfb9bca5e192d9662b6d722022ab852e5480df273b17fd971305d3912c9edcd67363c7ada967910c0cf4de63ad8ed84a2a2b0e5c197dbe0b61f084bd02864804dc5adffc183c9ff5aa1fcfbfa7e5b0234b49be5af37837e0d161813f9899369eef292d21e97b13835aa796420c722b443cce50fbc47591e96140a4b4dad05125dd0eaec1202d8"}) [ 1511.211169][T26417] usb usb5: usbfs: process 26417 (syz-executor.4) did not claim interface 0 before use [ 1511.243290][T26424] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1511.255535][T26423] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1511.266490][T26426] usb usb5: usbfs: process 26426 (syz-executor.5) did not claim interface 0 before use [ 1511.277809][T26426] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0}) 09:15:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1a010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)) (async) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000300)={0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe5, &(0x7f0000000100)="3f3f13cf09324aa87cd55066b275e63d962feb8a0c2fce372b47f07593c93024aff9b4887a609203833165310a0e9c942197ce15639d7892d82efe79d55033647cc84e478e040d66ee63d62e7874a88bd605501ec406c863afe902f26d6ba82e20514a38bcac348d48a42cf8fd29809c59b9d0bc6ef5eb1c2668402355b2696fe1f04440a38a14c1feb2670c10abeed4f6c3c291a05e522453725df44dcd9a0d975d5aa12e6a6073be4b704f86147a11ef6742c064dc9b8d5f", 0xb9, 0x2, 0xffffff80, 0x1, 0x1a4, 0x0, &(0x7f00000001c0)="f00e978b3be50dd5fa84bea7709846984cfe7821cf0d235dc0fcfef59a33e1ad797ceff51bb7734dde31ea558a72c1e646371fa507033965257c32b9afc056ed29891e2868c884a8c1021ed5d08651e7a4edfb9bca5e192d9662b6d722022ab852e5480df273b17fd971305d3912c9edcd67363c7ada967910c0cf4de63ad8ed84a2a2b0e5c197dbe0b61f084bd02864804dc5adffc183c9ff5aa1fcfbfa7e5b0234b49be5af37837e0d161813f9899369eef292d21e97b13835aa796420c722b443cce50fbc47591e96140a4b4dad05125dd0eaec1202d8"}) 09:15:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1a020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1512.001614][T26429] usb usb5: usbfs: process 26429 (syz-executor.4) did not claim interface 0 before use [ 1512.017719][T26437] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1512.020853][T26429] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1512.040797][T26430] usb usb5: usbfs: process 26430 (syz-executor.3) did not claim interface 0 before use 09:15:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0}) 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1c010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x3020000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x8, 0x401, 0x6, 0x6c, 0xc8ac, &(0x7f00000000c0)="109f33a7cd552340fa42f11902103e0fade0990d16bbdf0c0ac5c6f6e03160c0f012388ce081c3af21847b101160c79e1a76ddc27c103dce4dea0d8fb6e50b17270dd2ef16860ec20c1e54f5bdbfa9913490099d82e88ccf8eee999bf4c2030268c90f525d94620899606f10"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x8000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1512.045849][T26440] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1512.050697][T26430] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1512.069487][T26436] usb usb5: usbfs: process 26436 (syz-executor.5) did not claim interface 0 before use [ 1512.093765][T26447] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x1c030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0}) [ 1512.100324][T26449] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1512.109254][T26448] usb usb5: usbfs: process 26448 (syz-executor.4) did not claim interface 0 before use [ 1512.124058][T26448] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1512.131314][T26451] usb usb5: usbfs: process 26451 (syz-executor.3) did not claim interface 0 before use 09:15:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x8, 0x401, 0x6, 0x6c, 0xc8ac, &(0x7f00000000c0)="109f33a7cd552340fa42f11902103e0fade0990d16bbdf0c0ac5c6f6e03160c0f012388ce081c3af21847b101160c79e1a76ddc27c103dce4dea0d8fb6e50b17270dd2ef16860ec20c1e54f5bdbfa9913490099d82e88ccf8eee999bf4c2030268c90f525d94620899606f10"}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x8000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x20020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1512.146576][T26455] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1512.164885][T26459] usb usb5: usbfs: process 26459 (syz-executor.4) did not claim interface 0 before use [ 1512.179225][T26459] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1512.185595][T26463] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1512.203837][T26461] usb usb5: usbfs: process 26461 (syz-executor.3) did not claim interface 0 before use 09:15:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x3200000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x8, 0x401, 0x6, 0x6c, 0xc8ac, &(0x7f00000000c0)="109f33a7cd552340fa42f11902103e0fade0990d16bbdf0c0ac5c6f6e03160c0f012388ce081c3af21847b101160c79e1a76ddc27c103dce4dea0d8fb6e50b17270dd2ef16860ec20c1e54f5bdbfa9913490099d82e88ccf8eee999bf4c2030268c90f525d94620899606f10"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x0) (async) fcntl$addseals(r1, 0x409, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x8000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0}) 09:15:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x20030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:40 executing program 5: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0}) 09:15:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x3230000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x22030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1512.862304][T26466] usb usb5: usbfs: process 26466 (syz-executor.4) did not claim interface 0 before use [ 1512.870808][T26467] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1512.878983][T26466] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1512.889620][T26470] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1512.929725][T26483] usb usb5: usbfs: process 26483 (syz-executor.4) did not claim interface 0 before use [ 1512.941001][T26483] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1512.948470][T26484] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1512.956003][T26481] usb usb5: usbfs: process 26481 (syz-executor.5) did not claim interface 0 before use [ 1512.965884][T26481] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x25000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x752e, 0x0, 0x0, 0x0}) 09:15:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 09:15:40 executing program 5: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:15:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x28020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 09:15:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 09:15:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2a000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x7530, 0x0, 0x0, 0x0}) 09:15:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1513.740866][T26495] usb usb5: usbfs: process 26495 (syz-executor.5) did not claim interface 0 before use [ 1513.753413][T26495] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1513.761242][T26497] usb usb5: usbfs: process 26497 (syz-executor.4) did not claim interface 0 before use [ 1513.771772][T26500] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1513.829631][T26516] usb usb5: usbfs: process 26516 (syz-executor.4) did not claim interface 0 before use [ 1513.844972][T26516] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1513.852079][T26517] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2c000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:41 executing program 5: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0}) 09:15:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x2c020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0}) 09:15:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1514.605322][T26528] usb usb5: usbfs: process 26528 (syz-executor.4) did not claim interface 0 before use [ 1514.616812][T26528] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1514.624033][T26523] usb usb5: usbfs: process 26523 (syz-executor.5) did not claim interface 0 before use [ 1514.644162][T26521] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) close(r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000000)={0xa1, 0x18}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 09:15:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x680ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x30030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x32020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1514.661221][T26535] usb usb5: usbfs: process 26535 (syz-executor.4) did not claim interface 0 before use [ 1514.686814][T26535] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1514.698111][T26538] usb usb5: usbfs: process 26538 (syz-executor.5) did not claim interface 0 before use 09:15:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0}) 09:15:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) close(r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000000)={0xa1, 0x18}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) (async) close(r1) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000000)={0xa1, 0x18}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) [ 1514.708340][T26543] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6a0ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1514.737712][T26549] usb usb5: usbfs: process 26549 (syz-executor.4) did not claim interface 0 before use [ 1514.747670][T26549] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1514.761984][T26552] usb usb5: usbfs: process 26552 (syz-executor.5) did not claim interface 0 before use [ 1514.772280][T26553] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1514.780846][T26552] usb usb5: usbfs: process 26552 (syz-executor.5) did not claim interface 0 before use [ 1514.790559][T26552] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1514.798081][T26552] vhci_hcd: default hub control req: a118 v0000 i0000 l0 09:15:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x34020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0}) 09:15:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) close(r1) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000000)={0xa1, 0x18}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 09:15:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x36020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1515.453171][T26561] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1515.461690][T26567] usb usb5: usbfs: process 26567 (syz-executor.5) did not claim interface 0 before use [ 1515.472106][T26567] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1515.484277][T26567] vhci_hcd: default hub control req: a118 v0000 i0000 l0 [ 1515.491800][T26568] usb usb5: usbfs: process 26568 (syz-executor.4) did not claim interface 0 before use 09:15:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x38020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0}) 09:15:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x38030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') write$snapshot(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 1515.503703][T26563] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1515.525196][T26574] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1515.555564][T26579] usb usb5: usbfs: process 26579 (syz-executor.5) did not claim interface 0 before use [ 1515.568829][T26579] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1515.576827][T26581] usb usb5: usbfs: process 26581 (syz-executor.4) did not claim interface 0 before use 09:15:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3a000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') write$snapshot(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (async) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') (async) write$snapshot(r2, 0x0, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) 09:15:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0}) 09:15:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) [ 1516.301282][T26587] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1516.308803][T26588] usb usb5: usbfs: process 26588 (syz-executor.4) did not claim interface 0 before use [ 1516.313244][T26589] xt_check_match: 12 callbacks suppressed [ 1516.313260][T26589] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1516.320390][T26588] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1516.343498][T26592] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3a020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x880ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0}) 09:15:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (rerun: 64) ioctl$SNAPSHOT_FREE(r1, 0x3305) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') write$snapshot(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 1516.358056][T26590] usb usb5: usbfs: process 26590 (syz-executor.5) did not claim interface 0 before use [ 1516.376850][T26596] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x3a030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x40010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1516.414233][T26603] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1516.423052][T26605] usb usb5: usbfs: process 26605 (syz-executor.5) did not claim interface 0 before use [ 1516.438765][T26610] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1516.441588][T26605] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7, 0x0, 0x8, 0x81, 0xbb1, r2}) [ 1516.456478][T26607] usb usb5: usbfs: process 26607 (syz-executor.4) did not claim interface 0 before use [ 1516.466002][T26614] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1516.498924][T26617] usb usb5: usbfs: process 26617 (syz-executor.3) did not claim interface 0 before use [ 1516.508772][T26617] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1516.516171][T26618] usb usb5: usbfs: process 26618 (syz-executor.5) did not claim interface 0 before use [ 1516.526199][T26620] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0}) 09:15:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x40030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f00000000c0)) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000300)={0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe5, &(0x7f0000000100)="3f3f13cf09324aa87cd55066b275e63d962feb8a0c2fce372b47f07593c93024aff9b4887a609203833165310a0e9c942197ce15639d7892d82efe79d55033647cc84e478e040d66ee63d62e7874a88bd605501ec406c863afe902f26d6ba82e20514a38bcac348d48a42cf8fd29809c59b9d0bc6ef5eb1c2668402355b2696fe1f04440a38a14c1feb2670c10abeed4f6c3c291a05e522453725df44dcd9a0d975d5aa12e6a6073be4b704f86147a11ef6742c064dc9b8d5f", 0xb9, 0x2, 0xffffff80, 0x1, 0x1a4, 0x0, &(0x7f00000001c0)="f00e978b3be50dd5fa84bea7709846984cfe7821cf0d235dc0fcfef59a33e1ad797ceff51bb7734dde31ea558a72c1e646371fa507033965257c32b9afc056ed29891e2868c884a8c1021ed5d08651e7a4edfb9bca5e192d9662b6d722022ab852e5480df273b17fd971305d3912c9edcd67363c7ada967910c0cf4de63ad8ed84a2a2b0e5c197dbe0b61f084bd02864804dc5adffc183c9ff5aa1fcfbfa7e5b0234b49be5af37837e0d161813f9899369eef292d21e97b13835aa796420c722b443cce50fbc47591e96140a4b4dad05125dd0eaec1202d8"}) 09:15:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7, 0x0, 0x8, 0x81, 0xbb1, r2}) 09:15:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x42030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0}) [ 1517.174037][T26626] usb usb5: usbfs: process 26626 (syz-executor.4) did not claim interface 0 before use [ 1517.186005][T26631] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1517.199999][T26626] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1517.207246][T26628] usb usb5: usbfs: process 26628 (syz-executor.5) did not claim interface 0 before use [ 1517.217202][T26629] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7, 0x0, 0x8, 0x81, 0xbb1, r2}) 09:15:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa80ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x44000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1517.237213][T26627] usb usb5: usbfs: process 26627 (syz-executor.3) did not claim interface 0 before use [ 1517.253420][T26627] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1517.260983][T26637] usb usb5: usbfs: process 26637 (syz-executor.4) did not claim interface 0 before use [ 1517.271309][T26640] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0}) 09:15:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1517.272552][T26642] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1517.288815][T26641] usb usb5: usbfs: process 26641 (syz-executor.5) did not claim interface 0 before use [ 1517.297474][T26644] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1517.313130][T26646] usb usb5: usbfs: process 26646 (syz-executor.4) did not claim interface 0 before use [ 1517.323494][T26646] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x105301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x15}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xe1fd, 0x20800) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000100)={0x5, 0x1}) 09:15:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x442e0000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1517.337599][T26651] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1517.358138][T26655] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0}) 09:15:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x48000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x105301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x15}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xe1fd, 0x20800) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000100)={0x5, 0x1}) 09:15:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x48010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0}) [ 1518.038656][T26660] usb usb5: usbfs: process 26660 (syz-executor.4) did not claim interface 0 before use [ 1518.049170][T26663] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1518.059758][T26660] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1518.067342][T26664] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0}) 09:15:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x105301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x15}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xe1fd, 0x20800) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000100)={0x5, 0x1}) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x105301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x15}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0xe1fd, 0x20800) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000100)={0x5, 0x1}) (async) 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4c000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1518.092034][T26668] usb usb5: usbfs: process 26668 (syz-executor.4) did not claim interface 0 before use [ 1518.109488][T26672] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1518.120830][T26668] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1518.128236][T26675] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4c010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xda3ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0}) [ 1518.184158][T26680] usb usb5: usbfs: process 26680 (syz-executor.4) did not claim interface 0 before use [ 1518.194160][T26680] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1518.201310][T26682] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1518.222668][T26692] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1518.230133][T26694] usb usb5: usbfs: process 26694 (syz-executor.4) did not claim interface 0 before use [ 1518.239901][T26694] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4e010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0}) 09:15:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x7fff, 0x0, 0x80000005, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xdee84c406a7fad22, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x60, 0xa, 0x3, 0x1000, 0x0, 0x2, &(0x7f0000000100)}) 09:15:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x4e020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1518.896825][T26702] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1518.909971][T26705] usb usb5: usbfs: process 26705 (syz-executor.5) did not claim interface 0 before use [ 1518.933383][T26705] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x7fff, 0x0, 0x80000005, 0x0, 0x0}) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xdee84c406a7fad22, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x60, 0xa, 0x3, 0x1000, 0x0, 0x2, &(0x7f0000000100)}) 09:15:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0}) 09:15:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0}) 09:15:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x52000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1518.940830][T26703] usb usb5: usbfs: process 26703 (syz-executor.4) did not claim interface 0 before use [ 1518.959529][T26709] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1518.974931][T26712] usb usb5: usbfs: process 26712 (syz-executor.5) did not claim interface 0 before use [ 1518.984834][T26712] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1519.031698][T26717] usb usb5: usbfs: process 26717 (syz-executor.4) did not claim interface 0 before use [ 1519.044164][T26717] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1519.051443][T26719] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1519.058917][T26721] usb usb5: usbfs: process 26721 (syz-executor.3) did not claim interface 0 before use 09:15:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x7fff, 0x0, 0x80000005, 0x0, 0x0}) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xdee84c406a7fad22, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x60, 0xa, 0x3, 0x1000, 0x0, 0x2, &(0x7f0000000100)}) 09:15:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x52010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0}) 09:15:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x74000000, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x56010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x5a030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1519.751587][T26726] usb usb5: usbfs: process 26726 (syz-executor.5) did not claim interface 0 before use [ 1519.773609][T26726] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1519.781005][T26732] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1519.788328][T26731] usb usb5: usbfs: process 26731 (syz-executor.4) did not claim interface 0 before use 09:15:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0}) 09:15:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0}) 09:15:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)=0x6) 09:15:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x60000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1519.799013][T26733] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1519.835386][T26743] usb usb5: usbfs: process 26743 (syz-executor.3) did not claim interface 0 before use [ 1519.847536][T26743] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1519.855193][T26747] usb usb5: usbfs: process 26747 (syz-executor.5) did not claim interface 0 before use [ 1519.865387][T26745] usb usb5: usbfs: process 26745 (syz-executor.4) did not claim interface 0 before use 09:15:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x62010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0}) 09:15:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)=0x6) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)=0x6) (async) 09:15:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0}) 09:15:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x66020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x66030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x68000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1520.597266][T26755] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1520.604777][T26758] usb usb5: usbfs: process 26758 (syz-executor.4) did not claim interface 0 before use [ 1520.632721][T26758] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x25000000, 0x0, 0x0, 0x0}) 09:15:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6c000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1520.640132][T26757] usb usb5: usbfs: process 26757 (syz-executor.3) did not claim interface 0 before use [ 1520.653899][T26761] usb usb5: usbfs: process 26761 (syz-executor.5) did not claim interface 0 before use [ 1520.679388][T26761] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1520.690406][T26768] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1520.701025][T26771] usb usb5: usbfs: process 26771 (syz-executor.4) did not claim interface 0 before use [ 1520.715128][T26774] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x6f000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000000c0)=0x6) 09:15:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x2e750000, 0x0, 0x0, 0x0}) 09:15:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0}) [ 1521.450962][T26781] usb usb5: usbfs: process 26781 (syz-executor.3) did not claim interface 0 before use [ 1521.457275][T26782] xt_check_match: 14 callbacks suppressed [ 1521.457291][T26782] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1521.473840][T26781] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1521.485494][T26785] usb usb5: usbfs: process 26785 (syz-executor.4) did not claim interface 0 before use 09:15:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x72030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz0', "7e4c83c9a2a27fa09dc1bb5be5604ab7e5a2f53264df154e33ee10a279df1ae4809ae236879c727b99fb9ee6d91fa685c8f5230104c2123808882f19673d57339844b4da38ee5dbe01aec99aa8cf4893f5ca8ed7ad1727c2ea8692736a97d7c47a14e7213cbc88ff1ec6d0585510b102d4ffe6f6851efe947e2558fb10ab14e25142cb93601d"}, 0x8a) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x20, &(0x7f0000000000)={0xa1, 0x0, 0xfffe}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1521.495557][T26784] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1521.507167][T26787] usb usb5: usbfs: process 26787 (syz-executor.5) did not claim interface 0 before use [ 1521.518728][T26790] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x30750000, 0x0, 0x0, 0x0}) 09:15:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x74000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x76010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1521.550185][T26795] usb usb5: usbfs: process 26795 (syz-executor.5) did not claim interface 0 before use [ 1521.560213][T26795] vhci_hcd: default hub control req: a100 vfffe i0000 l0 [ 1521.567745][T26797] usb usb5: usbfs: process 26797 (syz-executor.4) did not claim interface 0 before use [ 1521.571572][T26799] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1521.581203][T26794] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1521.600492][T26801] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 1521.611736][T26803] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz0', "7e4c83c9a2a27fa09dc1bb5be5604ab7e5a2f53264df154e33ee10a279df1ae4809ae236879c727b99fb9ee6d91fa685c8f5230104c2123808882f19673d57339844b4da38ee5dbe01aec99aa8cf4893f5ca8ed7ad1727c2ea8692736a97d7c47a14e7213cbc88ff1ec6d0585510b102d4ffe6f6851efe947e2558fb10ab14e25142cb93601d"}, 0x8a) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) (async) write$snapshot(r2, 0x0, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x20, &(0x7f0000000000)={0xa1, 0x0, 0xfffe}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0}) 09:15:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x4008550c, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7a000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7a030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) [ 1522.301225][T26809] usb usb5: usbfs: process 26809 (syz-executor.4) did not claim interface 0 before use [ 1522.313492][T26815] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1522.315076][T26809] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1522.330964][T26807] usb usb5: usbfs: process 26807 (syz-executor.5) did not claim interface 0 before use [ 1522.341337][T26814] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7c010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz0', "7e4c83c9a2a27fa09dc1bb5be5604ab7e5a2f53264df154e33ee10a279df1ae4809ae236879c727b99fb9ee6d91fa685c8f5230104c2123808882f19673d57339844b4da38ee5dbe01aec99aa8cf4893f5ca8ed7ad1727c2ea8692736a97d7c47a14e7213cbc88ff1ec6d0585510b102d4ffe6f6851efe947e2558fb10ab14e25142cb93601d"}, 0x8a) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x20, &(0x7f0000000000)={0xa1, 0x0, 0xfffe}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1522.361313][T26818] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1522.385378][T26821] usb usb5: usbfs: process 26821 (syz-executor.4) did not claim interface 0 before use [ 1522.397706][T26821] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000002c0)={0x0, r1, "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", "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"}) r3 = syz_open_dev$rtc(&(0x7f00000012c0), 0x29d, 0x20a000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r2, "4d3ba7d22a42022535a69e558b67e754e11f2a91f8f5f323d5083b1237459f09878aab523b236a7239dacfae153159ffb9bf15e247c35a9021cf07ae38a19874cb99c81c0317f709bdba6a3ee0002c8855518cf17711506ab284170084016a08ffd1c77f0bfb2a3cf2472ff4ae806974395e1af9c35f92dfc053ed16942ec011c953728683b7d42d9d4ecbf50b4a0e5fac2775fc207dfe9e7dd4071bb04f499906bb47563f94f20ed257bff0f835d598d50534fd42a5ac51a184fef24c65534529a4833ca0aadecfbe9093c3a0642a2fd45c2575903cdf7ebb75e9b676b0ab9a4f391b05ca44225d08dc1872a9e2f173315ee12732ea961e0f4e4f90a51ebefd", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002300)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000003500)={r4, r5, "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", "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"}) fsetxattr$security_selinux(r3, &(0x7f0000002500), &(0x7f0000002540)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002580)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000025c0)=0x4) [ 1522.406347][T26829] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1522.418504][T26824] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1522.431989][T26831] usb usb5: usbfs: process 26831 (syz-executor.5) did not claim interface 0 before use [ 1522.442504][T26831] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0}) 09:15:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x7e020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1522.558801][T26834] usb usb5: usbfs: process 26834 (syz-executor.4) did not claim interface 0 before use [ 1522.559380][T26835] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1522.572234][T26834] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000002c0)={0x0, r1, "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", "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"}) syz_open_dev$rtc(&(0x7f00000012c0), 0x29d, 0x20a000) (async) r3 = syz_open_dev$rtc(&(0x7f00000012c0), 0x29d, 0x20a000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r2, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r2, "4d3ba7d22a42022535a69e558b67e754e11f2a91f8f5f323d5083b1237459f09878aab523b236a7239dacfae153159ffb9bf15e247c35a9021cf07ae38a19874cb99c81c0317f709bdba6a3ee0002c8855518cf17711506ab284170084016a08ffd1c77f0bfb2a3cf2472ff4ae806974395e1af9c35f92dfc053ed16942ec011c953728683b7d42d9d4ecbf50b4a0e5fac2775fc207dfe9e7dd4071bb04f499906bb47563f94f20ed257bff0f835d598d50534fd42a5ac51a184fef24c65534529a4833ca0aadecfbe9093c3a0642a2fd45c2575903cdf7ebb75e9b676b0ab9a4f391b05ca44225d08dc1872a9e2f173315ee12732ea961e0f4e4f90a51ebefd", "593b88bc9896de114511c02d0465708a4d1d26624072186f674316582c6b4e3b9f9108f3404884e14b7eb8ff65470900926474f64e8b2a526526f603ca9793fc60d42be0a950ab68d22d9d2ebb025f5d3aaa32560d51e5effdeba51e2be375501cc7f289697f9ae1e5a5b62cd111150a554f822eee82b5ebe094f2f1f101662bdf2957b6dffa936db9cd24ff8cf239da14d3aca791f80b07af818bdece4babdcf02c7ec4cff603b1a0708b51875992018efae637b7547b6540460a615605dfb7cd4f242dd88110ac08c3236bad6efbc6634188940b5357f19348b90b96f7ddd6b1e522b86b5bc6529580ec7a3632d8dc0478a36ea70c4afd2be1cde366af8a6b0065b6ed0158b0ef8f426425d6734d8cd2f5ff5e48deff457e80fa3eef6a0f3d949ec6b543c21ee5eeea80a91d83ca99051c9eb6d9031e72a240f58c4f1a96d92acb6b3a2659d55ef862c971ac971afa9ba225a787e3263e419978da7bf7a932887cad588cb3f03b7b65d3faff4a0e074912bb155f72baad192b44bfb35bbc684678b9f468c851640011edf1abb1174872a283e8d8af0242a55b6699cb26bb55de2bcbb5654c6249e7afad133420d79c54017de977540e0436a1db94505820120d8a24232afe836f13c1af7f9ab41fd87a2de204ed2c6f27413783353401e081491b16b5315a1f4dfcdd5718b8bd6cd9f72ee3c0354062e203e4ca8580f1792e1b996ab140fecc3bf560b766b86ce487ada611078e8557a33cf595a94f7af68a2c7cd4ce1dd972c2e6e2aa29134c9085cdd17e4571b9acd45c9e961af9569fd064493ffcbeb51c901b843168bdaefbbe0b14628a4a75a965041620c761574f7336235fbe3e65f46c4f02c77d3fec82f64fafdfedcba522577e91bdff654e86ad985105fb5ee354062cd12aaa07bc5b4fccba6e087f921bb78af714b8893fad771d9d832d388317d4704389229b2b83f5001082d8074a3c60358dced8f7aa70f464468be6681236f4a9eccdaca5656375618fb812a5e0ea630406b3a18000e0fe02d2e4c1fe819929f4663610276edbf455f5c2a7ad3d62cecf87bc2563639a5d0575f3b3b739f102528e3551de13f2082902d12105bb630d8100c10d6b9723b1d7d2d3e9899f326067606042184a4059ccb410df2274ca050a9fee4021f022416af089e9a1370b41554818cc4dd132a44808b8e60809b34772e96798174819fc23c20164e2fb6539a7693cf73aaee321693582a89c3dab73ec4a41b6e74f2a1795156422b0e98b1142ff3bda8330e88cca3708defe7c55f647215e79c49e95861a37f5956255f113195468c150a33a481a43450a105ec2596ee81d0519455d0c71ad690f8cf786b7c50887cd2305b1ba061f5ceb5923bf4f1feeac800762ceaaed1b8321dbf744eb74f2f75f53974952a186babc7101c33f845bff0237e2c3b92020ab27f41086497e7c9bf0453b00ee5e835f6a07c63d28a42d2386aafe2500924d25fc20892b77ce317f5cc28a709edfb9d6c116f9c67497eb969444f8cc8a75e26a423a41c2c6e262b8a6fe8eca19704eb0bf29031a0e261fcd99bdc7004e3eb2b9f8e5d444a8a7294f2004fbcfc7a235c990ea399ea12e3d128c713038109e3d049f810fff91559774550377d4f8e8145ad6db5dbee7afd81a343022014cd60933c7931b0d717b78891c28c05ca19b7dc2400a0cbbf62a3a1bca18a017706c7901837005ca125c36655df29c3cacbb519b34b4af4e04498308ed1caab3490b0b1bbacead2aec214998b43d63b19a655c2303b4f6afcfe389aa819e000e66f025b3f34088d534830e7d9a2dbad8c3caa3f8b2723071bcd74c55929ab52f6435ea69c77c3ebae71471dac8eb0e74878f4b5fcbdc0bed2f7d82d2005da2897271c37bd542af22bbdacefbbd031fed217f378a187f9c10914e9f871b0a99ebd08f630168f81b066c9d5b71acadb0cf29500fd4bfb349e1c5a96936bab728ada79a751f532f1c9905028e802ad7b28a05c4af1d26144b140a3143d8964625b83fe872fefc0de79e1330c8a4670563c749548ef03bd046627f5be311a16442bc80639de1a43b6f45635f67315579fcc281a5ee229dc01b78b75d9eec4dac1cb3d2c220744b1e3fc09004845d8c1e04367d8013ea193724a3710e80c35d52d2e9ccd25bf28658a509c8234b4bfb25d94928a93530c45102e2441ca01397e08ac74a7033b285a9f8e736c55f1a79974b6f358491d5c2eb3c8ed9d5c1f2e12bbab962a2136d3bc321f6622175e12698a6f52bf82b80ecd706efa716dad032a0c6d90d422a5f7e2906e68e0ee98fcc570a874a53eece092e3643ab9ac0e11cabd2b06276760bf549dec1b0f729c5f94528c68d607136354df69131f09823c423a33cffe72ff25768d612f76ce9ead624103f288d9932280027f6c433fe62622e06b105fc0e86d51015ef0aa9aa03169d340a5eb52d2dcbded91173a071f3a385b20c60beaa8ea3adc0acce4fd2f3f0c480149ce61df650a8dc2770681eb98eaf1f500d86b4da7e3545961ee9979ceb1dae748449949bfd92139c33033f16649b3d49b6a2abb9a0c91c153e7a82fe05331c36829b0c686634f8fd30bacd4d36244b957b419f4ca4701529af226e752f44dc541ebfc616213172f0d9ebcbf78026a60de650ac1fc174ad3a72b59475fded788aa4b03bddd1ae9ac2bedb637c2a82866fbd34bdb64b47e81d581d7489cd2a1f5a40aed641e700360d3f32c929239ccf9a3750db4679e570b26cffec5626e410c5bc36714772f478686196f305f4700fe0ce8c8e012b4306949320a4aa0f13fe2f0114d0ce391ff1db9973e065bb3e4adba4d4d4815de877df1402209cca560fb7d110dcd1a2efc1cade12276839157dbffc0ee419043747f057380d85bef27668a59b76efabc597c5f101fb39002eda2fd8212b39d66dd776fb9a34948f605dbeefa5c54979bb42d472dc67cfaa22e7eef8a20f5787a6f48901b5185a6b3a5bc9168f2bb984c81386372fe5ccc7022ea82779b14c6fc73b3b142537c71c5970cfb71b807071c457f15713c92b5588b4c2fbd862c087ca96d1881df5dd1476f2bcf34f0980a188d5c2f21a0f56b488e481fc531b110408f7982eb414f0c1ca91fa9363d1c71e7fd417c946d01ff7edbe1d07e796ef7078da07764b26c05cfef75934bd5b972f6187b22e5402c055e2c360a57720c51718e1a2d2c239d9abe304d73b150a0acf5379a9d0ad25e5bf6d930e9e0002343a7902b937c7fcfe8c4955a64d95400c192b2d0c23559b70b4c5a37b64b3224c00c0b5a16e9c0411d7353839e5054ef717b07e4b176d8ed81a416dbe7d993368f63a68102345cf57942b3683d516995f0064cd64f1206ea6098b8b684fca69a9eeca5e3170cfccd1e97676b2f2bc14aede82636f3e533b9b6259a3267262d521398dd9956bd911cf5f72bf375e0740c9f47fc7c78b556a2c015f0c6dfe939caef0b6b185e5618f3f9a90dd0240c2693c4376f9d184faac941668d7774b3f82923ccbba47cd5dbbce0d707762ce43c4689e0a3b98e2dac75142e36db58ef174a6df187ee0cfa3ddd0eb753c030e7cb908c64d2520d49cec5c757a7d3c28175c84ef3f05e6a9bd044cc9cf334f450f477428b3e1634f2acdf06e9b2a2432db976b5020c0c12cc8ffaa83b2f4a59035825c6cf29b4e154e02bf4f2111dc0db987acdf8f90934d3809582e2af83ecf596bd558b70447224bad086d11ea3392b92f9d974854249dffa52d997ff43104c6ba156f868f50336b08cdffc4a64ed31ef5eb1bb6f95e0973e8cafcc01892cb37ab4fdd7c624c72d3a9bbf14661b8da6d5ec76fe908c97ca3b0d6675c2823fc294c2076033de8b4ca2d5741c939047cf20fd8047eb20df6bbc2c8ee87388e93ccaff35693bc115a96881156c233723a31034b3234dbc3b6d8b7dbc7349f61049871162fb4db71fadff99258cff738572a8ebd11bde654d5e98cad260775119ffade7a03c457ce2c79ddfb3987ed3b36dbffb7ed03ba58ae76eb29ee66f55ee18e73c7cdd7d2ef152f88558c47139a1db0fb99744d946d114e28ada253f94cf118c4560059386040721dc9c6c139963ed18ea54e5a703c0e1f493952c2b738c9d2c648c9c554787a386f59f23cfb59e42613bbd52428feec377cdf0237fe8b5422150d9c9a0111cb974b020b6a7f952cffa0a189468c8691412a3de628ca36ce73cd5f2b3d4dfae9eb4ab961f2c478ee66d33aebd535adb8819c17ceb87b2cc091a1ee5b67edf0613257252291adaaf168ede981302928eb6c65e88315f991797bfbf7cbf9fb66192105b93bd3a29df4a04661cce039c0d28a1e942335d238fbc066d1340a8e6a4f817da215fe7ec050228c1b45bd0b252ce848ea6cb0eabc7efb449dc2289b9d3276c72d0c5c1b8450563453df4bb8a192f3ff74cbc84b2116d6b8c1e79a6d6909fdab9e28208f22634e9cb395063fe11e45bee798f9117ea58646b65830bdc066dc0fb8d57de6ea14603e16688986804079e3f30ce6e18b8e67827fad71723d4deef7cb0113130b44dbcff59c2c2e4f49d5f07a2c04a84eef97d4f8598e8dafd13e4a984ed15c5cf0fd1064a78062ebfa8e18e3395623c83fa87c42c07b266818c14e9bdb74074f4bb67dbda555c6f76449fd54e53a2479e29cb8ca65e37c9bfb9428562ee5cdd4ffd8426be0d4c3780ac9f76c1563f69fc740c1bd6509c9ee8b00e1605d5d3a4e2a0b996b4fe6188526124a6c294d8d128d0015e3ae02cf66bbb5f99fad9f2224ed814776d19eeb5176ea528e62acbd201cc16c6407bbbdb2818b855743c201a24ba494c97fcdee425295aad2a59d312f1c42c8a078edd46c5bfb41f86f8634485aa43e33ba13886c365205fd1ecbdcc87887270cee3b789cb0c9cf6f3a1f80fe3c8900f6cd41de848c759c9a1ffb6005240931cf4fd58d6fc1669eb63c659ae7207d3d2353c9ca9bce1b789d5a060a252eb646da2afcf9dc246ae80b1f34af08ef52645167e97913a094a151d3d9ff5c7260c31957a766928faf4c09be65d05078823e4110f26a0ddd26d10f7ff81b9c47cc386ea82ecfac635483595fdadce4069b7bac939ab7826f2717af18d989fae0ccf9f5d23dd77ab77d376cfdd7f87e7b7ae99613d82abad2209d7db5a7309ca0e9791370cc0505727ba38d620549b1c163233945417b903c9f20a88d16fbfd63b275c9d40d383ec4d038c0d1245e8251a95d0e5e84120154a3e6ada85942b3439e41005b55b0bbe3fd80125a3a4f2c1eaddb0758a6dd0b8faf3d9b38854197d5f54be8903aabe8813713c4baaf1ec454c1bdc7d58fb6abb4804e37af4de4406e66349553118a3177ded34e1a40f11e866dccaf63b07d3a56085df5f201c03d6f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002300)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000003500)={r4, r5, "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", "0a4d6910a535d2f4b817063566dfa74ed33d2571cf619a397157c5c51826eb0183c2e0325bdce8e63f33248757f15e8b926df2d44525a1cca364e40f96cd237c9a357476e146b22bc3eb10be8f827772c95d59755642e59d514c1f0af7c47e1fc3fcad51fc89b7dfa76352c44694cd3eabac6d2fb324fa919f2da8cd18578fc245f202f2f00287674adb877b3a3906ddb2666cfea0e43be7beee53ccf83b7d681e19ae9e85dfa44c1aa249c3efe808c91cce12c357243ea595fdb7bd949859378b40b13293d8eebe42cdb6ecdbddc06f30e4642bc0bac7ab50b68da221160097d9de27adf444599761be038f362c6823271781b6d261c8e7dcdc41c0b01e550ad4f11358f8dafe89dfea5062ed2fbd8a41cc0a31e534ec7ea938653ee5b4c3e8bc3971bac5e0ebcbb14f2a13e059180987f18f8f960c59223c4791197958b29cfb033f03961f4b68ce3bc487747db367b4db8bd4bc673c629343168acbf636375b17d8f145f4e420ea790b40ebd2198ab91c2e8d4107a4801a249b0e73c937e8cc2d8ba9576d27c9d45df09bf1387f6473a27ba13d8a37c32bffada5235c8ae1f9e6abbb792f586135b9661f2e7bb7addd016d0985b824b31b848a03b4498d19bc9fef9b0666544436b3fd35c35bfd7f40885e77e2816a4c0f510a19fb3a15abf19771713ceda595619ff922efed9430cd64f33a4c3ceb803d974be64d4e87d412b12a6379e7ba267ff2e3c31fea46e3463eb0dd0e7858fc070bf40ac5d90ef8915e2e40e68f30fe259eb222fcca4a03cd69d36063a15eac4f2f2b1c2cd86282af366b4a7a735a862662bf2a2dec58af646b6cdf57387dfea56c6e4425396abdb51eec31098e5bf4799a797c69734509748088a752e02e5577af3f2467d6d39d4c994e8a6929eee3b43eabf300d255c955be01d0cef839cb2db86d876914b51a99e8195de7efb5fbaf3cbd3d279ace543e525c02fd5ecda9ae55c35de4ad9b7aa98a526a923c97cc176d48d197818838c629cea3c000f7f372de80158c521d4272437a4f796ae8b52797cc44520217c7115d96115677d46384b46bf15d6c55b34a7c02781af1880523875a3bce5517a4a324758187b78d502436af775b7822d123f77044b5fc369bc9bef8d0e885483fdcf68aeefaad3a81b4b341d338fc6123e1f416c7a4bc38c06b52be624995fb899a30ec3dac425b376367236f4883f62da077c464ba55c15de9f6cf5b74e2c4ac89bf4fd165f50d052dded85e312d5b0143e63b4d883eabe0a5a2c3207d7fe05b8edb28e597c34c2b2b4658244cb26f50cd95c298f01a610807f23fe1041c7c69f625bcd5c42352493ec5c689335dd1296b1743a1f6e27eb823b995ae30fd375496d817947137bdb2f0b37cbc9bce69546651d32610e7c9cb51627a724e0bb691e5eee4b8d9b12e14b4d53cefa0dde311aebd190f41aed80a1cead49a6d141933b4b88588303fa4a48aae8a0e845c6fd34392c07be7dcfcc303226b73d358f8635a816f53c5204945ecd4d7f30afd313ad74d67c6db9f439c21aed531c1cd2d2f87d42f6304903d7657b7380cb0d1690d3bc49466256669da29472a425a8f663c6c5155d3dc1351c868de01953582db550bb800366196f433a3df00d4287b30286a17469eeee7eafa0fd0bff0f8e0018f92fa26a359f14a728dea708611a561d4bc397519d06e1806757537651b6fda3188e256c6642018cbe3b74230fc786746aaf4bf96812538f66862defc85049a84ede56281bd601a72f19ba77c8ff098bf136822a11e4ab3f783bfeae38603265079ff4bcca88eacdd517212638a6f3222630abf176d0f588760df48b848088fc3bd072218c5c80bbc11d37f218f0c9435fd1235807cdecf6ea28437f8c5f19b6aa6d4d0e9beaed570dcb81829f522c543986d5fbe3eb003c7518ca0339e178078ab894c49548c9660fdb2f20762c8760d32b0451c1db2b78e10d8be85bb7d618934dd960bcf13ae1b8761aee91a7ec2b74c95a6fae49c18a9e6e5b339d08a9e111d81dfeb5b27a7564dce330985f4699bbf7e37d2e5b428addab15ab80a07d2024c809e2f6e92cb01fd45d1ab48df1c64f1d8b4bcbc712545a9bb16735d577aab2ce54147d42d05dd992b835b7b655f296016cbfa440a8b46b849c0f32fff406654d50012bb8052bbe9c3a0ee00026d1c7536d40ff0fad7eba217fb45c05c999d39a7acb6f9ecc77c40f58e78b5805c259bd59b944f827afc708d901af0f961fb86d038456846aa21d11cf685047c8281588b8da99aecc28a4618a8b907d9337300b27ca06d17ba1fb225270d47b74a343030127c88f830210f87c07663d19cb99ff22b2df81975bab07c4c92deb3e0bb0ba3305c2c19589aef5e54b9e64cb89905b35c829a27383957bc177406feb926e64ce4e37c989dff0d86dbe3daef01a45f54e45c394f8f51f404f4b54870443f54a2547b42c05a34e0feda062e2335271cf10e1552b1a5c925aa8f3eef8e80e5c27283302ebf2815ae591c7b3c7df4f12386b924eb8e7c193028cfd29890d3fd9fcaefd180d487c8312128bc5eda33f5fecbfd392f08c5baa3e448f7be28a24391f83e2edb31e32fdf1ef2147c50044a0bfe5658f46af46c98170a1f0a89b87463a87257901b3d2ee0bbff7d892accfb80a358353746c913fc587b322839fb977dc0c9e9afc59e1afffadd6f16d77b083c5249d74594b542f48ea95083f80699ccd472a80bc888173fe7741183791d8690db8cef0a0289345208884adbab8f510765729a329eee89c6f7efb58c877664b03296386f12f99bb1ff8d3eab50fc3355a570020ef0dda02ab38aaf32a9fa791ceaad248ef0dce2958ee7f585f0db81bcc2ecf2b26b5a8caed8e360c98da09d66a15edf58d61575e4e162a16fa518b4705a589fd9143c56cb8be1d9da6b931f7d3ef95e634cd6840e02cc719b7a3e24cdb387baaa544e6f76b957a54f39d3ce28d340125be00e7c5b627a6e79dc796461d6f89b637fb0adb6580a391e4bef0d4a63bb2dd7e3d727f181aaff80f646413254b2482f0f326b2bf89e3c8ec1d7343f2976c2d57742de108e7392ef73fc17ddd7e69959c09025cf84a99a4ae4f38d6a041adaeeb5e95934366d788e06fb76111d8526dbcd8cd04dfbc18f230f1f8f038305dfb1edbda1aeee05376dd7bba695c2af1f31a03308227276f10f480a9c2681d2681c84ab8d1c764569631264061d4c47da3de68acc40ea47ce413d8ae13519458719eaa4b148c64de95f83b486ea4a84da77f6d522fbc0c43d91714a780955b792ee6865305bbf41294a1eaae7c1d1b93c1ebe81b683e809fa94d1a15b16dbc9da6b501d731906f84634cf1e9541ac046ed184f6bdd577deb6eb6ece9ceb1bfae429df99e1d5862aa3caf2488fd739343c025eab08481a3d08dab3eb450c2f8de251f5cad54f73f05c643105692d7d5851f3b8a721fd03a2efe3f4bd07163330db034e2c283ddaa3b32302595636dc5cabf62be3ca1534b3f6a35a027b196952bd6da4e18928c92deac91ea79c50cc6db5a54f08bd9b8c5d1b0ee8dff7f9df99f4b3e7e22897ccc2f9ea16e1d7709829de30a59cea759188c9e38099f4e1a93b51dcc71bddd4c834237ad08f9146a7b3772508746ba9387bd970d6e865b88183f4ec7191862189fe708e8da5a01d7957c682cc0890e4e66e73d34598c6d26ff5472dfba016456bde8eeb6f525e1d02cd7b45c5dccc4bfc67c2d4d46d85379f8b5c44e6f9da9e37194e5c04233ef744bad4f86536646db760040e5d11c6cdd1979788d8e3b90a158bd98319d8b9f893e938369f64408fa7193f9638ff2e3d6d8fb3320235028378721bcc5c591fdd0ece935bb4fbe3814713c2ff1210a3baf10a338ecd53d54bbf3433ede99c34d0ccb282cca0100c82c605bcaca153e6c6c68f432ce72e194b0e1e4d8e0b00bccfdf78f3b4440cb2ac40670cdddea44cdb8b7317931affd120e20a16d0def6ab1266d0171e699768d996585833996092144b866565e3a92359ae70e8b02c7c7e2768a0b4952079b4f8987b0db89829cb21f0e1744b2d592507294fd186374bb513194a322eb8c7e0018d391fcc755087776389e766ea77249298e6c645895a57d0bb7a03521a09f59b6374aabfa77d2c94afd6a93c5d969223aee1ab23b845d398860db656098f66a2140f20aa2474ee95c26e548954137d4787ee4e0eb4cd41da41dc613728bf0a7a612e5e8a9af9443ad8f3f873f496d169aceaddb447a1e7ddef2d0c913ad59bef89c80ee7d92fa8645eae04779775608072236aeeb10b80641e1783fbd3082c1cedfe01424c1316f0ffbb7c42e16d4a8d50f48a0f3735da283836694377e51405d4d9ad71d259101564233ebbfff3bf3107812177da36b05f82002cb56da045afb7c97fd18f24755dc15d549b78481081bb9165249a709a644ace1219e818ceb78ff332521f2c2d5e4f6b26f949969ca835b0b4f05b06972f2bdaaef0db55205d0e72569c2dee13d953b06774e3a02b7e99d3033865479ba5ec75597545ee7a789222b4f0bc7f18438dce3bb1f620d4d180a3fa90fd8392f1633eb31a65215f7aae49c3227c3a05e1669d204731035e4294af8b62add9f189f5adeb5ea9590388c9b1f93bc60e6eb97587b6e575f3e0b07b624b27c092283c4d97e5a4dbd804079ab2b9a2eedf48eef4d24a8531d68ca48e09ca5e9b6bf125bf9216313dc4ee91a013f39c1fdbefcb326bc537964d30d43908c6970d062adcc7e7f0decc0c768537c32dc3cac0fc76eec52d13e486ec54ce05588ad14cf355d5b51299a82af551e8c86f44c8e64b26d861622d18b939b0c1a6c31049ca3e942f668a9090b26f32008ee34e51ee1be2b6903f929afeaecfcdf6238319ab167b79084587ee9899c3faa78c9c6231688b8760c187cf6bf5a4c764a8eb3c7192328dc0fcf379d621610ba06f70e084faf57a4aa49d918ab4f860758e4c7dd30ac05b6af03a51269ec1b73f6f33e0da6da0609eea49f43b7db26a74d5b28199a6f5c72cddc074db96f5c09b0c709caf27eaaaa2203ab7591f8cf6e8c16e702fba89ca550a72453c50edd3ec946558e0a6ca18b7050ac70e2e9a7c7ec73b3e07b8dff93ffdff0c323cba9d48ef9fc6b66a888bcb5e87542c8de8a9a1b1dfce4b251b8e71c1001c10a3da53d047a59ee83cf31052f7f306f2b7454572d7a679a20f845d41a4d9122cbe0d8a6f18966a5ae0a3b86e228a8450e476b42205bd84024d9de3e246ad32dfad66994dc8b2a88f08d8d8cea4bdd0ff1954545fcb260cfd96b3599a79a99f9d228598f9b7c8186ad0e29db4ba4689157f5712bf91cb7778b425d0293b7ff3b2e7c26ab711bc3b90ac5e71c2dfd4db7ca53795ba78d57a7b80"}) fsetxattr$security_selinux(r3, &(0x7f0000002500), &(0x7f0000002540)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x1) (async) fsetxattr$security_selinux(r3, &(0x7f0000002500), &(0x7f0000002540)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002580)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000025c0)=0x4) 09:15:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x82020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0}) 09:15:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x82030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0}) [ 1523.144694][T26842] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1523.148012][T26844] usb usb5: usbfs: process 26844 (syz-executor.4) did not claim interface 0 before use [ 1523.168673][T26844] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1523.179319][T26848] usb usb5: usbfs: process 26848 (syz-executor.3) did not claim interface 0 before use 09:15:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x86020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$snapshot(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) write$snapshot(r3, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYRESHEX=r2, @ANYRESHEX=r3], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r5 = syz_open_pts(r0, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8000, 0x9, 0x7, 0xfffffff7, 0xa, "be294c406b5aa39cbd747ff6d2c4a0d4bd2a0b"}) [ 1523.188879][T26850] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1523.189225][T26848] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1523.206454][T26847] usb usb5: usbfs: process 26847 (syz-executor.5) did not claim interface 0 before use [ 1523.217803][T26841] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1523.232070][T26854] usb usb5: usbfs: process 26854 (syz-executor.4) did not claim interface 0 before use [ 1523.242752][T26854] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8a030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000002c0)={0x0, r1, "94c77c36b94467dabea466f8f2085b4ad3ba0971983b703bc76ed25f8a0bf45d85267fbbc24b5950c45616e2367912a895c515378027e950bc41962ef1eb277583d2723a57d0304e3f116c44570838265a4b1fce6115eac9e46a6c9e4dfa8234d95b45db69db666d3ad2acd1831f68abdc782a17775057cb716dc2466d360038e9c52acdd28a45aa2304a76d7b7426e5ce94a4c3b4f544168054405d56716322abb696c2ef6e87d55384a15e3dd391bb365e4a56270207af0d74e55ec529ad67c115580723bfcfb397f6d70ebf810effc5d39b3f924f0c1bbd62a2bfe948a2d64f81251d8dd5076de9c99950d612f986fe1e8ddfe448ae41180f51481a48e92c", "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"}) r3 = syz_open_dev$rtc(&(0x7f00000012c0), 0x29d, 0x20a000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002300)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000003500)={r4, r5, "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", "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"}) fsetxattr$security_selinux(r3, &(0x7f0000002500), &(0x7f0000002540)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002580)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000025c0)=0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000002c0)={0x0, r1, "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", "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"}) (async) syz_open_dev$rtc(&(0x7f00000012c0), 0x29d, 0x20a000) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={0x0, r2, "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", "593b88bc9896de114511c02d0465708a4d1d26624072186f674316582c6b4e3b9f9108f3404884e14b7eb8ff65470900926474f64e8b2a526526f603ca9793fc60d42be0a950ab68d22d9d2ebb025f5d3aaa32560d51e5effdeba51e2be375501cc7f289697f9ae1e5a5b62cd111150a554f822eee82b5ebe094f2f1f101662bdf2957b6dffa936db9cd24ff8cf239da14d3aca791f80b07af818bdece4babdcf02c7ec4cff603b1a0708b51875992018efae637b7547b6540460a615605dfb7cd4f242dd88110ac08c3236bad6efbc6634188940b5357f19348b90b96f7ddd6b1e522b86b5bc6529580ec7a3632d8dc0478a36ea70c4afd2be1cde366af8a6b0065b6ed0158b0ef8f426425d6734d8cd2f5ff5e48deff457e80fa3eef6a0f3d949ec6b543c21ee5eeea80a91d83ca99051c9eb6d9031e72a240f58c4f1a96d92acb6b3a2659d55ef862c971ac971afa9ba225a787e3263e419978da7bf7a932887cad588cb3f03b7b65d3faff4a0e074912bb155f72baad192b44bfb35bbc684678b9f468c851640011edf1abb1174872a283e8d8af0242a55b6699cb26bb55de2bcbb5654c6249e7afad133420d79c54017de977540e0436a1db94505820120d8a24232afe836f13c1af7f9ab41fd87a2de204ed2c6f27413783353401e081491b16b5315a1f4dfcdd5718b8bd6cd9f72ee3c0354062e203e4ca8580f1792e1b996ab140fecc3bf560b766b86ce487ada611078e8557a33cf595a94f7af68a2c7cd4ce1dd972c2e6e2aa29134c9085cdd17e4571b9acd45c9e961af9569fd064493ffcbeb51c901b843168bdaefbbe0b14628a4a75a965041620c761574f7336235fbe3e65f46c4f02c77d3fec82f64fafdfedcba522577e91bdff654e86ad985105fb5ee354062cd12aaa07bc5b4fccba6e087f921bb78af714b8893fad771d9d832d388317d4704389229b2b83f5001082d8074a3c60358dced8f7aa70f464468be6681236f4a9eccdaca5656375618fb812a5e0ea630406b3a18000e0fe02d2e4c1fe819929f4663610276edbf455f5c2a7ad3d62cecf87bc2563639a5d0575f3b3b739f102528e3551de13f2082902d12105bb630d8100c10d6b9723b1d7d2d3e9899f326067606042184a4059ccb410df2274ca050a9fee4021f022416af089e9a1370b41554818cc4dd132a44808b8e60809b34772e96798174819fc23c20164e2fb6539a7693cf73aaee321693582a89c3dab73ec4a41b6e74f2a1795156422b0e98b1142ff3bda8330e88cca3708defe7c55f647215e79c49e95861a37f5956255f113195468c150a33a481a43450a105ec2596ee81d0519455d0c71ad690f8cf786b7c50887cd2305b1ba061f5ceb5923bf4f1feeac800762ceaaed1b8321dbf744eb74f2f75f53974952a186babc7101c33f845bff0237e2c3b92020ab27f41086497e7c9bf0453b00ee5e835f6a07c63d28a42d2386aafe2500924d25fc20892b77ce317f5cc28a709edfb9d6c116f9c67497eb969444f8cc8a75e26a423a41c2c6e262b8a6fe8eca19704eb0bf29031a0e261fcd99bdc7004e3eb2b9f8e5d444a8a7294f2004fbcfc7a235c990ea399ea12e3d128c713038109e3d049f810fff91559774550377d4f8e8145ad6db5dbee7afd81a343022014cd60933c7931b0d717b78891c28c05ca19b7dc2400a0cbbf62a3a1bca18a017706c7901837005ca125c36655df29c3cacbb519b34b4af4e04498308ed1caab3490b0b1bbacead2aec214998b43d63b19a655c2303b4f6afcfe389aa819e000e66f025b3f34088d534830e7d9a2dbad8c3caa3f8b2723071bcd74c55929ab52f6435ea69c77c3ebae71471dac8eb0e74878f4b5fcbdc0bed2f7d82d2005da2897271c37bd542af22bbdacefbbd031fed217f378a187f9c10914e9f871b0a99ebd08f630168f81b066c9d5b71acadb0cf29500fd4bfb349e1c5a96936bab728ada79a751f532f1c9905028e802ad7b28a05c4af1d26144b140a3143d8964625b83fe872fefc0de79e1330c8a4670563c749548ef03bd046627f5be311a16442bc80639de1a43b6f45635f67315579fcc281a5ee229dc01b78b75d9eec4dac1cb3d2c220744b1e3fc09004845d8c1e04367d8013ea193724a3710e80c35d52d2e9ccd25bf28658a509c8234b4bfb25d94928a93530c45102e2441ca01397e08ac74a7033b285a9f8e736c55f1a79974b6f358491d5c2eb3c8ed9d5c1f2e12bbab962a2136d3bc321f6622175e12698a6f52bf82b80ecd706efa716dad032a0c6d90d422a5f7e2906e68e0ee98fcc570a874a53eece092e3643ab9ac0e11cabd2b06276760bf549dec1b0f729c5f94528c68d607136354df69131f09823c423a33cffe72ff25768d612f76ce9ead624103f288d9932280027f6c433fe62622e06b105fc0e86d51015ef0aa9aa03169d340a5eb52d2dcbded91173a071f3a385b20c60beaa8ea3adc0acce4fd2f3f0c480149ce61df650a8dc2770681eb98eaf1f500d86b4da7e3545961ee9979ceb1dae748449949bfd92139c33033f16649b3d49b6a2abb9a0c91c153e7a82fe05331c36829b0c686634f8fd30bacd4d36244b957b419f4ca4701529af226e752f44dc541ebfc616213172f0d9ebcbf78026a60de650ac1fc174ad3a72b59475fded788aa4b03bddd1ae9ac2bedb637c2a82866fbd34bdb64b47e81d581d7489cd2a1f5a40aed641e700360d3f32c929239ccf9a3750db4679e570b26cffec5626e410c5bc36714772f478686196f305f4700fe0ce8c8e012b4306949320a4aa0f13fe2f0114d0ce391ff1db9973e065bb3e4adba4d4d4815de877df1402209cca560fb7d110dcd1a2efc1cade12276839157dbffc0ee419043747f057380d85bef27668a59b76efabc597c5f101fb39002eda2fd8212b39d66dd776fb9a34948f605dbeefa5c54979bb42d472dc67cfaa22e7eef8a20f5787a6f48901b5185a6b3a5bc9168f2bb984c81386372fe5ccc7022ea82779b14c6fc73b3b142537c71c5970cfb71b807071c457f15713c92b5588b4c2fbd862c087ca96d1881df5dd1476f2bcf34f0980a188d5c2f21a0f56b488e481fc531b110408f7982eb414f0c1ca91fa9363d1c71e7fd417c946d01ff7edbe1d07e796ef7078da07764b26c05cfef75934bd5b972f6187b22e5402c055e2c360a57720c51718e1a2d2c239d9abe304d73b150a0acf5379a9d0ad25e5bf6d930e9e0002343a7902b937c7fcfe8c4955a64d95400c192b2d0c23559b70b4c5a37b64b3224c00c0b5a16e9c0411d7353839e5054ef717b07e4b176d8ed81a416dbe7d993368f63a68102345cf57942b3683d516995f0064cd64f1206ea6098b8b684fca69a9eeca5e3170cfccd1e97676b2f2bc14aede82636f3e533b9b6259a3267262d521398dd9956bd911cf5f72bf375e0740c9f47fc7c78b556a2c015f0c6dfe939caef0b6b185e5618f3f9a90dd0240c2693c4376f9d184faac941668d7774b3f82923ccbba47cd5dbbce0d707762ce43c4689e0a3b98e2dac75142e36db58ef174a6df187ee0cfa3ddd0eb753c030e7cb908c64d2520d49cec5c757a7d3c28175c84ef3f05e6a9bd044cc9cf334f450f477428b3e1634f2acdf06e9b2a2432db976b5020c0c12cc8ffaa83b2f4a59035825c6cf29b4e154e02bf4f2111dc0db987acdf8f90934d3809582e2af83ecf596bd558b70447224bad086d11ea3392b92f9d974854249dffa52d997ff43104c6ba156f868f50336b08cdffc4a64ed31ef5eb1bb6f95e0973e8cafcc01892cb37ab4fdd7c624c72d3a9bbf14661b8da6d5ec76fe908c97ca3b0d6675c2823fc294c2076033de8b4ca2d5741c939047cf20fd8047eb20df6bbc2c8ee87388e93ccaff35693bc115a96881156c233723a31034b3234dbc3b6d8b7dbc7349f61049871162fb4db71fadff99258cff738572a8ebd11bde654d5e98cad260775119ffade7a03c457ce2c79ddfb3987ed3b36dbffb7ed03ba58ae76eb29ee66f55ee18e73c7cdd7d2ef152f88558c47139a1db0fb99744d946d114e28ada253f94cf118c4560059386040721dc9c6c139963ed18ea54e5a703c0e1f493952c2b738c9d2c648c9c554787a386f59f23cfb59e42613bbd52428feec377cdf0237fe8b5422150d9c9a0111cb974b020b6a7f952cffa0a189468c8691412a3de628ca36ce73cd5f2b3d4dfae9eb4ab961f2c478ee66d33aebd535adb8819c17ceb87b2cc091a1ee5b67edf0613257252291adaaf168ede981302928eb6c65e88315f991797bfbf7cbf9fb66192105b93bd3a29df4a04661cce039c0d28a1e942335d238fbc066d1340a8e6a4f817da215fe7ec050228c1b45bd0b252ce848ea6cb0eabc7efb449dc2289b9d3276c72d0c5c1b8450563453df4bb8a192f3ff74cbc84b2116d6b8c1e79a6d6909fdab9e28208f22634e9cb395063fe11e45bee798f9117ea58646b65830bdc066dc0fb8d57de6ea14603e16688986804079e3f30ce6e18b8e67827fad71723d4deef7cb0113130b44dbcff59c2c2e4f49d5f07a2c04a84eef97d4f8598e8dafd13e4a984ed15c5cf0fd1064a78062ebfa8e18e3395623c83fa87c42c07b266818c14e9bdb74074f4bb67dbda555c6f76449fd54e53a2479e29cb8ca65e37c9bfb9428562ee5cdd4ffd8426be0d4c3780ac9f76c1563f69fc740c1bd6509c9ee8b00e1605d5d3a4e2a0b996b4fe6188526124a6c294d8d128d0015e3ae02cf66bbb5f99fad9f2224ed814776d19eeb5176ea528e62acbd201cc16c6407bbbdb2818b855743c201a24ba494c97fcdee425295aad2a59d312f1c42c8a078edd46c5bfb41f86f8634485aa43e33ba13886c365205fd1ecbdcc87887270cee3b789cb0c9cf6f3a1f80fe3c8900f6cd41de848c759c9a1ffb6005240931cf4fd58d6fc1669eb63c659ae7207d3d2353c9ca9bce1b789d5a060a252eb646da2afcf9dc246ae80b1f34af08ef52645167e97913a094a151d3d9ff5c7260c31957a766928faf4c09be65d05078823e4110f26a0ddd26d10f7ff81b9c47cc386ea82ecfac635483595fdadce4069b7bac939ab7826f2717af18d989fae0ccf9f5d23dd77ab77d376cfdd7f87e7b7ae99613d82abad2209d7db5a7309ca0e9791370cc0505727ba38d620549b1c163233945417b903c9f20a88d16fbfd63b275c9d40d383ec4d038c0d1245e8251a95d0e5e84120154a3e6ada85942b3439e41005b55b0bbe3fd80125a3a4f2c1eaddb0758a6dd0b8faf3d9b38854197d5f54be8903aabe8813713c4baaf1ec454c1bdc7d58fb6abb4804e37af4de4406e66349553118a3177ded34e1a40f11e866dccaf63b07d3a56085df5f201c03d6f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002300)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000003500)={r4, r5, "0d66b3bfe84d7b97d09ea23b4c28be20e1db540b995831e0ef0a1ac93b7c1bbcaf82a31b8d82de3c27b903cf43bec3f3232028d4b15d899e4b99343bc4b5d11da72150da1b33454f7a8f73264efb77cb62837b2f74e2545ae733440fce6ae7b9f159a411f2822089420e2f06901dff7d05c7652608fc1ec5b0ed925e500e3c620e5e37eb82678c0c102debcdb64e43944ccb7e30358a14139f47a727a5358ce2be175b6bee8a12e2c315595e971507815e3a288d3b69bfcab57f7dfd7d2c0ab962ecdf3b071d6235b5aafb12a7f579bdbde4953fe5ac99eea8dc7ec0937ddcf219f7086aa6ae79bbeadc4d2d032577981472fffcc770689f53a15eb23c9e3280", "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"}) (async) fsetxattr$security_selinux(r3, &(0x7f0000002500), &(0x7f0000002540)='system_u:object_r:etc_aliases_t:s0\x00', 0x23, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002580)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000025c0)=0x4) (async) 09:15:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0}) 09:15:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8c020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x8e030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0}) 09:15:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1523.428821][T26864] usb usb5: usbfs: process 26864 (syz-executor.4) did not claim interface 0 before use [ 1523.440396][T26864] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1523.447826][T26866] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1523.455135][T26868] usb usb5: usbfs: process 26868 (syz-executor.5) did not claim interface 0 before use 09:15:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x94020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xa1000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1523.482521][T26874] usb usb5: usbfs: process 26874 (syz-executor.4) did not claim interface 0 before use [ 1523.497944][T26874] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1523.505308][T26875] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1523.513319][T26879] usb usb5: usbfs: process 26879 (syz-executor.5) did not claim interface 0 before use [ 1523.550896][T26886] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 09:15:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0}) 09:15:51 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) fallocate(r0, 0x4, 0x2, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9a030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xf1760000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1524.100527][T26892] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1524.107878][T26893] usb usb5: usbfs: process 26893 (syz-executor.4) did not claim interface 0 before use [ 1524.119188][T26893] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1524.126488][T26889] usb usb5: usbfs: process 26889 (syz-executor.5) did not claim interface 0 before use [ 1524.136397][T26898] FAULT_INJECTION: forcing a failure. [ 1524.136397][T26898] name fail_usercopy, interval 1, probability 0, space 0, times 0 09:15:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9c020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9c030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1524.149468][T26898] CPU: 1 PID: 26898 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller #0 [ 1524.158140][T26898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1524.168225][T26898] Call Trace: [ 1524.171536][T26898] [ 1524.174463][T26898] dump_stack_lvl+0xda/0x130 [ 1524.179140][T26898] dump_stack+0x15/0x20 [ 1524.183418][T26898] should_fail_ex+0x21f/0x230 [ 1524.188110][T26898] should_fail+0xb/0x10 [ 1524.192400][T26898] should_fail_usercopy+0x1a/0x20 09:15:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x9e000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xa4030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1524.197566][T26898] _copy_from_user+0x1e/0xd0 [ 1524.202226][T26898] usbdev_ioctl+0x1021/0x3e00 [ 1524.206984][T26898] ? do_vfs_ioctl+0x813/0x13a0 [ 1524.211762][T26898] ? usbdev_poll+0x120/0x120 [ 1524.216436][T26898] __se_sys_ioctl+0xcf/0x140 [ 1524.221102][T26898] __x64_sys_ioctl+0x43/0x50 [ 1524.225707][T26898] do_syscall_64+0x44/0x110 [ 1524.230224][T26898] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1524.236137][T26898] RIP: 0033:0x7fba1bb45ba9 [ 1524.240692][T26898] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1524.260301][T26898] RSP: 002b:00007fba1aec80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.268691][T26898] RAX: ffffffffffffffda RBX: 00007fba1bc64f80 RCX: 00007fba1bb45ba9 [ 1524.276641][T26898] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 1524.284597][T26898] RBP: 00007fba1aec8120 R08: 0000000000000000 R09: 0000000000000000 [ 1524.292624][T26898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:15:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 09:15:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 09:15:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:51 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) (async) fallocate(r0, 0x4, 0x2, 0x1) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1524.300578][T26898] R13: 000000000000000b R14: 00007fba1bc64f80 R15: 00007fff135c98e8 [ 1524.308535][T26898] [ 1524.332252][T26914] FAULT_INJECTION: forcing a failure. [ 1524.332252][T26914] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.345022][T26914] CPU: 1 PID: 26914 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller #0 [ 1524.353704][T26914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1524.363751][T26914] Call Trace: [ 1524.367050][T26914] [ 1524.369961][T26914] dump_stack_lvl+0xda/0x130 [ 1524.374547][T26914] dump_stack+0x15/0x20 [ 1524.378733][T26914] should_fail_ex+0x21f/0x230 [ 1524.383500][T26914] ? proc_do_submiturb+0x823/0x1db0 [ 1524.388713][T26914] __should_failslab+0x92/0xa0 [ 1524.393533][T26914] should_failslab+0x9/0x20 [ 1524.398128][T26914] __kmem_cache_alloc_node+0x4e/0x210 [ 1524.403495][T26914] ? proc_do_submiturb+0x823/0x1db0 [ 1524.408779][T26914] kmalloc_trace+0x2a/0xa0 [ 1524.413264][T26914] proc_do_submiturb+0x823/0x1db0 [ 1524.418444][T26914] ? path_openat+0x1962/0x1d70 [ 1524.423189][T26914] ? __rcu_read_unlock+0x4d/0x70 [ 1524.428177][T26914] ? avc_has_extended_perms+0x60b/0x810 [ 1524.433764][T26914] usbdev_ioctl+0x1d8c/0x3e00 [ 1524.438468][T26914] ? do_vfs_ioctl+0x813/0x13a0 [ 1524.443261][T26914] ? usbdev_poll+0x120/0x120 [ 1524.447892][T26914] __se_sys_ioctl+0xcf/0x140 [ 1524.452476][T26914] __x64_sys_ioctl+0x43/0x50 [ 1524.457107][T26914] do_syscall_64+0x44/0x110 [ 1524.461626][T26914] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1524.467519][T26914] RIP: 0033:0x7fba1bb45ba9 [ 1524.471976][T26914] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1524.491624][T26914] RSP: 002b:00007fba1aec80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.500017][T26914] RAX: ffffffffffffffda RBX: 00007fba1bc64f80 RCX: 00007fba1bb45ba9 [ 1524.507967][T26914] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 1524.515938][T26914] RBP: 00007fba1aec8120 R08: 0000000000000000 R09: 0000000000000000 [ 1524.523941][T26914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.531906][T26914] R13: 000000000000000b R14: 00007fba1bc64f80 R15: 00007fff135c98e8 [ 1524.539860][T26914] 09:15:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 09:15:52 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x0) (async) fallocate(r0, 0x4, 0x2, 0x1) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (rerun: 32) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 09:15:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffff8006, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xaa030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1524.952280][T26933] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1524.959888][T26930] usb usb5: usbfs: process 26930 (syz-executor.5) did not claim interface 0 before use [ 1524.978617][T26930] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1524.986395][T26931] usb usb5: usbfs: process 26931 (syz-executor.4) did not claim interface 0 before use [ 1524.996484][T26937] FAULT_INJECTION: forcing a failure. 09:15:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb4000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffff8008, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb4020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1524.996484][T26937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1525.009650][T26937] CPU: 0 PID: 26937 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller #0 [ 1525.018324][T26937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1525.028374][T26937] Call Trace: [ 1525.031654][T26937] [ 1525.034605][T26937] dump_stack_lvl+0xda/0x130 [ 1525.039218][T26937] dump_stack+0x15/0x20 [ 1525.043404][T26937] should_fail_ex+0x21f/0x230 [ 1525.048104][T26937] should_fail+0xb/0x10 09:15:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xb8010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xba010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1525.052316][T26937] should_fail_usercopy+0x1a/0x20 [ 1525.057345][T26937] _copy_from_user+0x1e/0xd0 [ 1525.061926][T26937] proc_do_submiturb+0x851/0x1db0 [ 1525.067017][T26937] ? path_openat+0x1962/0x1d70 [ 1525.071849][T26937] ? __rcu_read_unlock+0x4d/0x70 [ 1525.076870][T26937] ? avc_has_extended_perms+0x60b/0x810 [ 1525.082510][T26937] usbdev_ioctl+0x1d8c/0x3e00 [ 1525.087217][T26937] ? do_vfs_ioctl+0x813/0x13a0 [ 1525.092138][T26937] ? usbdev_poll+0x120/0x120 [ 1525.096782][T26937] __se_sys_ioctl+0xcf/0x140 [ 1525.101358][T26937] __x64_sys_ioctl+0x43/0x50 [ 1525.105931][T26937] do_syscall_64+0x44/0x110 [ 1525.110517][T26937] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1525.116395][T26937] RIP: 0033:0x7fba1bb45ba9 [ 1525.120819][T26937] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1525.140448][T26937] RSP: 002b:00007fba1aec80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1525.148857][T26937] RAX: ffffffffffffffda RBX: 00007fba1bc64f80 RCX: 00007fba1bb45ba9 [ 1525.156819][T26937] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 1525.164789][T26937] RBP: 00007fba1aec8120 R08: 0000000000000000 R09: 0000000000000000 [ 1525.172747][T26937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.180730][T26937] R13: 000000000000000b R14: 00007fba1bc64f80 R15: 00007fff135c98e8 [ 1525.188813][T26937] 09:15:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffff800a, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xba030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0}) 09:15:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 09:15:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180), 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="af2167390e0c995866ce19142cb1face9aa6be21f37baf1a78ca5dadb4b1329555873d9512cf2629fc23813925782659796a37fcbf48e3c74ca7dd91af7b3f8b1fd21a5bd584d947591f45810342ecb051313b5ad0befce8072c8ab6e2f25f044c84a6e275c6c16f07a3aca89ccba8e4c5f256cbabceec35db119e6a39d36a18710f1911b6a38fa0672223eac23bfb15caafb64c0c"}) 09:15:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xbc030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1525.807350][T26958] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1525.814736][T26957] usb usb5: usbfs: process 26957 (syz-executor.3) did not claim interface 0 before use [ 1525.828633][T26957] FAULT_INJECTION: forcing a failure. [ 1525.828633][T26957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1525.829836][T26956] usb usb5: usbfs: process 26956 (syz-executor.4) did not claim interface 0 before use [ 1525.841734][T26957] CPU: 1 PID: 26957 Comm: syz-executor.3 Not tainted 6.7.0-rc5-syzkaller #0 [ 1525.859989][T26957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1525.870074][T26957] Call Trace: [ 1525.873383][T26957] [ 1525.876318][T26957] dump_stack_lvl+0xda/0x130 [ 1525.880953][T26957] dump_stack+0x15/0x20 [ 1525.885199][T26957] should_fail_ex+0x21f/0x230 [ 1525.889889][T26957] should_fail+0xb/0x10 [ 1525.893709][T26956] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1525.894110][T26957] should_fail_usercopy+0x1a/0x20 [ 1525.894170][T26957] _copy_to_user+0x1e/0x90 [ 1525.894190][T26957] simple_read_from_buffer+0xa0/0x110 [ 1525.901502][T26967] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1525.906178][T26957] proc_fail_nth_read+0xfc/0x140 [ 1525.928043][T26957] ? proc_fault_inject_write+0x210/0x210 [ 1525.932760][T26971] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1525.933672][T26957] vfs_read+0x1a4/0x590 [ 1525.944831][T26957] ? mutex_lock+0xd/0x30 [ 1525.949150][T26957] ksys_read+0xeb/0x1a0 [ 1525.953437][T26957] __x64_sys_read+0x42/0x50 [ 1525.958020][T26957] do_syscall_64+0x44/0x110 [ 1525.962548][T26957] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1525.967907][T26974] usb usb5: usbfs: process 26974 (syz-executor.4) did not claim interface 0 before use [ 1525.968436][T26957] RIP: 0033:0x7fba1bb4484c [ 1525.978835][T26974] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffff8200, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffffa000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffffa006, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}) 09:15:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xbe010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1525.982427][T26957] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1525.990117][T26962] usb usb5: usbfs: process 26962 (syz-executor.5) did not claim interface 0 before use [ 1526.009019][T26957] RSP: 002b:00007fba1aec80c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1526.009042][T26957] RAX: ffffffffffffffda RBX: 00007fba1bc64f80 RCX: 00007fba1bb4484c [ 1526.009055][T26957] RDX: 000000000000000f RSI: 00007fba1aec8130 RDI: 0000000000000004 [ 1526.018952][T26975] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1526.027028][T26957] RBP: 00007fba1aec8120 R08: 0000000000000000 R09: 0000000000000000 09:15:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffffa300, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="af2167390e0c995866ce19142cb1face9aa6be21f37baf1a78ca5dadb4b1329555873d9512cf2629fc23813925782659796a37fcbf48e3c74ca7dd91af7b3f8b1fd21a5bd584d947591f45810342ecb051313b5ad0befce8072c8ab6e2f25f044c84a6e275c6c16f07a3aca89ccba8e4c5f256cbabceec35db119e6a39d36a18710f1911b6a38fa0672223eac23bfb15caafb64c0c"}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="af2167390e0c995866ce19142cb1face9aa6be21f37baf1a78ca5dadb4b1329555873d9512cf2629fc23813925782659796a37fcbf48e3c74ca7dd91af7b3f8b1fd21a5bd584d947591f45810342ecb051313b5ad0befce8072c8ab6e2f25f044c84a6e275c6c16f07a3aca89ccba8e4c5f256cbabceec35db119e6a39d36a18710f1911b6a38fa0672223eac23bfb15caafb64c0c"}) (async) 09:15:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1526.057986][T26957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1526.066124][T26957] R13: 000000000000000b R14: 00007fba1bc64f80 R15: 00007fff135c98e8 [ 1526.074105][T26957] [ 1526.083041][T26982] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1526.091561][T26981] usb usb5: usbfs: process 26981 (syz-executor.4) did not claim interface 0 before use [ 1526.102160][T26981] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1526.111145][T26984] usb usb5: usbfs: process 26984 (syz-executor.3) did not claim interface 0 before use [ 1526.121062][T26986] usb usb5: usbfs: process 26986 (syz-executor.5) did not claim interface 0 before use [ 1526.130879][T26986] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1526.141175][T26987] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180), 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}) 09:15:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc0000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xffffa30d, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x2, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="af2167390e0c995866ce19142cb1face9aa6be21f37baf1a78ca5dadb4b1329555873d9512cf2629fc23813925782659796a37fcbf48e3c74ca7dd91af7b3f8b1fd21a5bd584d947591f45810342ecb051313b5ad0befce8072c8ab6e2f25f044c84a6e275c6c16f07a3aca89ccba8e4c5f256cbabceec35db119e6a39d36a18710f1911b6a38fa0672223eac23bfb15caafb64c0c"}) 09:15:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc2000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1526.659560][T26996] usb usb5: usbfs: process 26996 (syz-executor.5) did not claim interface 0 before use [ 1526.660025][T26995] xt_check_match: 20 callbacks suppressed [ 1526.660041][T26995] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1526.683356][T26996] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1526.692696][T26997] usb usb5: usbfs: process 26997 (syz-executor.4) did not claim interface 0 before use 09:15:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) 09:15:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4b47, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:53 executing program 5: prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000380)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x4) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x2, 0x1}, 0x9, 0xa0, &(0x7f0000000100), 0x0, 0x8, 0x8001, 0x4, 0x6, 0x4, &(0x7f0000000140)="e41eacdf6b4fb3e1291c8f1f98bc0f024b136897a95fc1e048b06b5ee99dc21854f3438b116a24d593f75d649745e89777256f5f2615fc268ea68a4edbaa2f47e1efe13ba6606a10807b9d9fb352718a4f441acc3d824fae141e786eb6974bf1988801ca0b1d855be58fc6f07781b8ad6005"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x5}, 0x9, 0x3, &(0x7f0000000200)="091fddf338299cd5f4d1d41790f929c0330344a95cc156642f499c4224a3f3b2fd88fb96a961256a2674e16a67c62647500f5d53d6e0ad7bc4139032291f73f7f1cd7fffa3f70efd8bdfa70ca8c45762c545d1fa47cd7ad830492ffbdcfa", 0x5e, 0x200006, 0xfff, 0x5, 0x9, 0x7eda, &(0x7f0000000280)="3b501605ff17ed0478660bd0f5e2535c6b4920034d2851b33b377590f75f5cdfb8947d23ee5c1f7f4b69cc1720c00d76b6f23adb7591a95e3e8e8c09ea13ef631e9b761ca9dec87fe4a0330874f4771b99fe038748a96904192a1fb34c5edf05a332b37cfbac58325ec60307afa255b8a6b29ba19c5ab1d9595501e09c459fada861c1e2cfaa4a661dc3da972f23e3bdae7d6e58b430237ab3771270f6f53952d8597daa7bf16e5e146858aa5d91ba007f3583a73f37a36a715d6bd02d0dd21d7e360faaec3aa7db0922c215888c637ec9059437e4060ade35a332977620aec96948a4d921117c92de3916b8"}) getpid() ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) [ 1526.708438][T27000] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1526.728114][T27004] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc2010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1526.753903][T27003] usb usb5: usbfs: process 27003 (syz-executor.4) did not claim interface 0 before use [ 1526.772249][T27003] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1526.783304][T27008] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1526.794928][T27013] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180), 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4b49, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}) 09:15:54 executing program 5: prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000380)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x4) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x2, 0x1}, 0x9, 0xa0, &(0x7f0000000100), 0x0, 0x8, 0x8001, 0x4, 0x6, 0x4, &(0x7f0000000140)="e41eacdf6b4fb3e1291c8f1f98bc0f024b136897a95fc1e048b06b5ee99dc21854f3438b116a24d593f75d649745e89777256f5f2615fc268ea68a4edbaa2f47e1efe13ba6606a10807b9d9fb352718a4f441acc3d824fae141e786eb6974bf1988801ca0b1d855be58fc6f07781b8ad6005"}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x5}, 0x9, 0x3, &(0x7f0000000200)="091fddf338299cd5f4d1d41790f929c0330344a95cc156642f499c4224a3f3b2fd88fb96a961256a2674e16a67c62647500f5d53d6e0ad7bc4139032291f73f7f1cd7fffa3f70efd8bdfa70ca8c45762c545d1fa47cd7ad830492ffbdcfa", 0x5e, 0x200006, 0xfff, 0x5, 0x9, 0x7eda, &(0x7f0000000280)="3b501605ff17ed0478660bd0f5e2535c6b4920034d2851b33b377590f75f5cdfb8947d23ee5c1f7f4b69cc1720c00d76b6f23adb7591a95e3e8e8c09ea13ef631e9b761ca9dec87fe4a0330874f4771b99fe038748a96904192a1fb34c5edf05a332b37cfbac58325ec60307afa255b8a6b29ba19c5ab1d9595501e09c459fada861c1e2cfaa4a661dc3da972f23e3bdae7d6e58b430237ab3771270f6f53952d8597daa7bf16e5e146858aa5d91ba007f3583a73f37a36a715d6bd02d0dd21d7e360faaec3aa7db0922c215888c637ec9059437e4060ade35a332977620aec96948a4d921117c92de3916b8"}) (async) getpid() (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 09:15:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc2030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x541b, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc4010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0}) 09:15:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 5: prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000380)) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x4) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x2, 0x1}, 0x9, 0xa0, &(0x7f0000000100), 0x0, 0x8, 0x8001, 0x4, 0x6, 0x4, &(0x7f0000000140)="e41eacdf6b4fb3e1291c8f1f98bc0f024b136897a95fc1e048b06b5ee99dc21854f3438b116a24d593f75d649745e89777256f5f2615fc268ea68a4edbaa2f47e1efe13ba6606a10807b9d9fb352718a4f441acc3d824fae141e786eb6974bf1988801ca0b1d855be58fc6f07781b8ad6005"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x5}, 0x9, 0x3, &(0x7f0000000200)="091fddf338299cd5f4d1d41790f929c0330344a95cc156642f499c4224a3f3b2fd88fb96a961256a2674e16a67c62647500f5d53d6e0ad7bc4139032291f73f7f1cd7fffa3f70efd8bdfa70ca8c45762c545d1fa47cd7ad830492ffbdcfa", 0x5e, 0x200006, 0xfff, 0x5, 0x9, 0x7eda, &(0x7f0000000280)="3b501605ff17ed0478660bd0f5e2535c6b4920034d2851b33b377590f75f5cdfb8947d23ee5c1f7f4b69cc1720c00d76b6f23adb7591a95e3e8e8c09ea13ef631e9b761ca9dec87fe4a0330874f4771b99fe038748a96904192a1fb34c5edf05a332b37cfbac58325ec60307afa255b8a6b29ba19c5ab1d9595501e09c459fada861c1e2cfaa4a661dc3da972f23e3bdae7d6e58b430237ab3771270f6f53952d8597daa7bf16e5e146858aa5d91ba007f3583a73f37a36a715d6bd02d0dd21d7e360faaec3aa7db0922c215888c637ec9059437e4060ade35a332977620aec96948a4d921117c92de3916b8"}) getpid() (async) getpid() ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x2}) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5421, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1526.947202][T27019] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1526.960445][T27020] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1526.974284][T27017] usb usb5: usbfs: process 27017 (syz-executor.4) did not claim interface 0 before use [ 1526.986348][T27017] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1527.028133][T27034] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1527.042307][T27039] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1527.066951][T27037] usb usb5: usbfs: process 27037 (syz-executor.4) did not claim interface 0 before use [ 1527.077189][T27037] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5450, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup(r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000001c0)={0xbe79, 0x5, [{0xe, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x11}, {0xe, 0x1}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x8004c0, 0xb0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0x0, 0xc}, {0xffe0, 0xfff2}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xc8030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xcc030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1527.204026][T27044] usb usb5: usbfs: process 27044 (syz-executor.5) did not claim interface 0 before use [ 1527.217697][T27050] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1527.228193][T27044] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1527.235591][T27047] usb usb5: usbfs: process 27047 (syz-executor.4) did not claim interface 0 before use 09:15:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup(r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000001c0)={0xbe79, 0x5, [{0xe, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x11}, {0xe, 0x1}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x8004c0, 0xb0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0x0, 0xc}, {0xffe0, 0xfff2}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) dup(r0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000001c0)={0xbe79, 0x5, [{0xe, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x11}, {0xe, 0x1}]}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x8004c0, 0xb0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0x0, 0xc}, {0xffe0, 0xfff2}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5451, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xce030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) [ 1527.249066][T27048] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1527.256148][T27054] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1527.279086][T27056] usb usb5: usbfs: process 27056 (syz-executor.5) did not claim interface 0 before use [ 1527.301752][T27056] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1527.314006][T27063] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1527.324637][T27059] usb usb5: usbfs: process 27059 (syz-executor.4) did not claim interface 0 before use [ 1527.339706][T27065] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1527.347457][T27066] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd0020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5452, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0}) 09:15:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = dup(r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000001c0)={0xbe79, 0x5, [{0xe, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x11}, {0xe, 0x1}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x8004c0, 0xb0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0x0, 0xc}, {0xffe0, 0xfff2}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 09:15:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5460, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd0030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1527.497052][T27075] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1527.497334][T27078] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1527.514860][T27080] usb usb5: usbfs: process 27080 (syz-executor.4) did not claim interface 0 before use [ 1527.531157][T27080] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x550b, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0}) 09:15:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x8}, 0xfffffffd, 0x40, &(0x7f00000000c0)="ca091c2b363ea0cf74c0906ca0178d954f5ae3c61acd6ee8d44ded87b973790b275e", 0x22, 0x0, 0x9, 0x29, 0x7, 0x200, &(0x7f0000000100)="b6084dd2f7212a6d052c19b0cd5cd97d460899d38e4e3a1d7aea5afa09bcb4e5ad703462ff7139e21cee4e22647e987629cf36fec699cd20d70ded567b846a8e464aed0ba265162ac0ba083d80fa8925c31ab29f67e4ac7ff0ee022a6027a75d02bfcb39dd013a08db27abe0679bf1d6b5873167c92628bc90c08b6c4305ef0b", [{0x7, 0x80, 0x401}, {0x3, 0x0, 0x8}, {0x400, 0x10000, 0x3}, {0xf96c, 0x4}, {0x7, 0x9}, {0x3, 0x7, 0x2}, {0xfffffffb, 0x0, 0x9}, {0x2, 0x4, 0x10001}, {0x6, 0x1, 0x401}, {0x2, 0xfffffff8, 0xff}, {0x5, 0xffff0000, 0x3}, {0x1, 0x7}, {0x8, 0x9, 0x6}, {0x66, 0x1, 0xffffffff}, {0x5, 0x100, 0x404}, {0x0, 0x800, 0xb2}, {0x2, 0x4, 0x6e}, {0x843, 0x9, 0x4}, {0xc000, 0x8000}, {0x7a2, 0x4, 0x3}, {0x5a6, 0x3}, {0x2, 0x6, 0x7d6}, {0x8, 0x800, 0x4}, {0xff, 0xfffffffa, 0x101}, {0x401, 0x3, 0xdc}, {0x8, 0x1f, 0x74}, {0xaba3, 0x2, 0x4}, {0x41, 0x7, 0x8}, {0x49f7, 0x6, 0x800}, {0x5, 0x4, 0xffff}, {0xc2, 0x3, 0xfffffffc}, {0x0, 0x0, 0xef}, {0x9, 0x6000000, 0x8}, {0x4, 0x8000000, 0x8000}, {0x1000, 0x3ff, 0x3f}, {0x0, 0x7, 0xc72}, {0x5, 0x8, 0x2}, {0x200, 0x280000, 0x1}, {0x200, 0x9, 0x1ff}, {0x2, 0x7fffffff, 0x9}, {0x1, 0x5ad6, 0x6000000}]}) [ 1527.538824][T27074] usb usb5: usbfs: process 27074 (syz-executor.5) did not claim interface 0 before use [ 1527.564636][T27086] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1527.583778][T27091] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1527.596351][T27092] usb usb5: usbfs: process 27092 (syz-executor.4) did not claim interface 0 before use [ 1527.614082][T27092] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1527.627532][T27094] usb usb5: usbfs: process 27094 (syz-executor.5) did not claim interface 0 before use [ 1527.643987][T27094] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd2000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5514, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0}) 09:15:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x8}, 0xfffffffd, 0x40, &(0x7f00000000c0)="ca091c2b363ea0cf74c0906ca0178d954f5ae3c61acd6ee8d44ded87b973790b275e", 0x22, 0x0, 0x9, 0x29, 0x7, 0x200, &(0x7f0000000100)="b6084dd2f7212a6d052c19b0cd5cd97d460899d38e4e3a1d7aea5afa09bcb4e5ad703462ff7139e21cee4e22647e987629cf36fec699cd20d70ded567b846a8e464aed0ba265162ac0ba083d80fa8925c31ab29f67e4ac7ff0ee022a6027a75d02bfcb39dd013a08db27abe0679bf1d6b5873167c92628bc90c08b6c4305ef0b", [{0x7, 0x80, 0x401}, {0x3, 0x0, 0x8}, {0x400, 0x10000, 0x3}, {0xf96c, 0x4}, {0x7, 0x9}, {0x3, 0x7, 0x2}, {0xfffffffb, 0x0, 0x9}, {0x2, 0x4, 0x10001}, {0x6, 0x1, 0x401}, {0x2, 0xfffffff8, 0xff}, {0x5, 0xffff0000, 0x3}, {0x1, 0x7}, {0x8, 0x9, 0x6}, {0x66, 0x1, 0xffffffff}, {0x5, 0x100, 0x404}, {0x0, 0x800, 0xb2}, {0x2, 0x4, 0x6e}, {0x843, 0x9, 0x4}, {0xc000, 0x8000}, {0x7a2, 0x4, 0x3}, {0x5a6, 0x3}, {0x2, 0x6, 0x7d6}, {0x8, 0x800, 0x4}, {0xff, 0xfffffffa, 0x101}, {0x401, 0x3, 0xdc}, {0x8, 0x1f, 0x74}, {0xaba3, 0x2, 0x4}, {0x41, 0x7, 0x8}, {0x49f7, 0x6, 0x800}, {0x5, 0x4, 0xffff}, {0xc2, 0x3, 0xfffffffc}, {0x0, 0x0, 0xef}, {0x9, 0x6000000, 0x8}, {0x4, 0x8000000, 0x8000}, {0x1000, 0x3ff, 0x3f}, {0x0, 0x7, 0xc72}, {0x5, 0x8, 0x2}, {0x200, 0x280000, 0x1}, {0x200, 0x9, 0x1ff}, {0x2, 0x7fffffff, 0x9}, {0x1, 0x5ad6, 0x6000000}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x8}, 0xfffffffd, 0x40, &(0x7f00000000c0)="ca091c2b363ea0cf74c0906ca0178d954f5ae3c61acd6ee8d44ded87b973790b275e", 0x22, 0x0, 0x9, 0x29, 0x7, 0x200, &(0x7f0000000100)="b6084dd2f7212a6d052c19b0cd5cd97d460899d38e4e3a1d7aea5afa09bcb4e5ad703462ff7139e21cee4e22647e987629cf36fec699cd20d70ded567b846a8e464aed0ba265162ac0ba083d80fa8925c31ab29f67e4ac7ff0ee022a6027a75d02bfcb39dd013a08db27abe0679bf1d6b5873167c92628bc90c08b6c4305ef0b", [{0x7, 0x80, 0x401}, {0x3, 0x0, 0x8}, {0x400, 0x10000, 0x3}, {0xf96c, 0x4}, {0x7, 0x9}, {0x3, 0x7, 0x2}, {0xfffffffb, 0x0, 0x9}, {0x2, 0x4, 0x10001}, {0x6, 0x1, 0x401}, {0x2, 0xfffffff8, 0xff}, {0x5, 0xffff0000, 0x3}, {0x1, 0x7}, {0x8, 0x9, 0x6}, {0x66, 0x1, 0xffffffff}, {0x5, 0x100, 0x404}, {0x0, 0x800, 0xb2}, {0x2, 0x4, 0x6e}, {0x843, 0x9, 0x4}, {0xc000, 0x8000}, {0x7a2, 0x4, 0x3}, {0x5a6, 0x3}, {0x2, 0x6, 0x7d6}, {0x8, 0x800, 0x4}, {0xff, 0xfffffffa, 0x101}, {0x401, 0x3, 0xdc}, {0x8, 0x1f, 0x74}, {0xaba3, 0x2, 0x4}, {0x41, 0x7, 0x8}, {0x49f7, 0x6, 0x800}, {0x5, 0x4, 0xffff}, {0xc2, 0x3, 0xfffffffc}, {0x0, 0x0, 0xef}, {0x9, 0x6000000, 0x8}, {0x4, 0x8000000, 0x8000}, {0x1000, 0x3ff, 0x3f}, {0x0, 0x7, 0xc72}, {0x5, 0x8, 0x2}, {0x200, 0x280000, 0x1}, {0x200, 0x9, 0x1ff}, {0x2, 0x7fffffff, 0x9}, {0x1, 0x5ad6, 0x6000000}]}) (async) 09:15:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd6000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1527.757032][T27100] usb usb5: usbfs: process 27100 (syz-executor.5) did not claim interface 0 before use [ 1527.768697][T27100] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1527.776355][T27103] usb usb5: usbfs: process 27103 (syz-executor.4) did not claim interface 0 before use [ 1527.786174][T27097] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1527.793966][T27109] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0}) 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd6030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 1527.801047][T27102] usb usb5: usbfs: interface 0 claimed by usbfs while 'syz-executor.3' resets device 09:15:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x8}, 0xfffffffd, 0x40, &(0x7f00000000c0)="ca091c2b363ea0cf74c0906ca0178d954f5ae3c61acd6ee8d44ded87b973790b275e", 0x22, 0x0, 0x9, 0x29, 0x7, 0x200, &(0x7f0000000100)="b6084dd2f7212a6d052c19b0cd5cd97d460899d38e4e3a1d7aea5afa09bcb4e5ad703462ff7139e21cee4e22647e987629cf36fec699cd20d70ded567b846a8e464aed0ba265162ac0ba083d80fa8925c31ab29f67e4ac7ff0ee022a6027a75d02bfcb39dd013a08db27abe0679bf1d6b5873167c92628bc90c08b6c4305ef0b", [{0x7, 0x80, 0x401}, {0x3, 0x0, 0x8}, {0x400, 0x10000, 0x3}, {0xf96c, 0x4}, {0x7, 0x9}, {0x3, 0x7, 0x2}, {0xfffffffb, 0x0, 0x9}, {0x2, 0x4, 0x10001}, {0x6, 0x1, 0x401}, {0x2, 0xfffffff8, 0xff}, {0x5, 0xffff0000, 0x3}, {0x1, 0x7}, {0x8, 0x9, 0x6}, {0x66, 0x1, 0xffffffff}, {0x5, 0x100, 0x404}, {0x0, 0x800, 0xb2}, {0x2, 0x4, 0x6e}, {0x843, 0x9, 0x4}, {0xc000, 0x8000}, {0x7a2, 0x4, 0x3}, {0x5a6, 0x3}, {0x2, 0x6, 0x7d6}, {0x8, 0x800, 0x4}, {0xff, 0xfffffffa, 0x101}, {0x401, 0x3, 0xdc}, {0x8, 0x1f, 0x74}, {0xaba3, 0x2, 0x4}, {0x41, 0x7, 0x8}, {0x49f7, 0x6, 0x800}, {0x5, 0x4, 0xffff}, {0xc2, 0x3, 0xfffffffc}, {0x0, 0x0, 0xef}, {0x9, 0x6000000, 0x8}, {0x4, 0x8000000, 0x8000}, {0x1000, 0x3ff, 0x3f}, {0x0, 0x7, 0xc72}, {0x5, 0x8, 0x2}, {0x200, 0x280000, 0x1}, {0x200, 0x9, 0x1ff}, {0x2, 0x7fffffff, 0x9}, {0x1, 0x5ad6, 0x6000000}]}) 09:15:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x551f, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd8000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1527.839073][T27115] usb usb5: usbfs: process 27115 (syz-executor.4) did not claim interface 0 before use [ 1527.865527][T27115] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1527.876524][T27117] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xd8010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5521, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0}) 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xda020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1527.888372][T27120] usb usb5: usbfs: process 27120 (syz-executor.5) did not claim interface 0 before use [ 1527.917782][T27120] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1527.934871][T27129] usb usb5: usbfs: process 27129 (syz-executor.4) did not claim interface 0 before use [ 1527.959010][T27129] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5522, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}) 09:15:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x200) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtclass={0x38, 0x28, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x9}, {0x5, 0xffe0}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xdc030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0}) 09:15:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xde030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x5523, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}) 09:15:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}) 09:15:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x200) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtclass={0x38, 0x28, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x9}, {0x5, 0xffe0}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x200) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtclass={0x38, 0x28, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x9}, {0x5, 0xffe0}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xe0010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1528.059439][T27135] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1528.067663][T27137] usb usb5: usbfs: process 27137 (syz-executor.5) did not claim interface 0 before use [ 1528.080137][T27137] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1528.087545][T27139] usb usb5: usbfs: process 27139 (syz-executor.4) did not claim interface 0 before use 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xe8030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1528.125075][T27148] usb usb5: usbfs: process 27148 (syz-executor.5) did not claim interface 0 before use [ 1528.142629][T27148] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1528.149967][T27151] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1528.158729][T27154] usb usb5: usbfs: process 27154 (syz-executor.4) did not claim interface 0 before use [ 1528.168500][T27157] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xea000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4004550c, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0}) 09:15:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0}) [ 1528.206243][T27167] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1528.221729][T27164] usb usb5: usbfs: process 27164 (syz-executor.4) did not claim interface 0 before use [ 1528.231589][T27164] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xea020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x200) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtclass={0x38, 0x28, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x9}, {0x5, 0xffe0}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 09:15:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0}) 09:15:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xea030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xec030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) close_range(0xffffffffffffffff, r1, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xee010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1528.928032][T27177] usb usb5: usbfs: process 27177 (syz-executor.5) did not claim interface 0 before use [ 1528.940275][T27177] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1528.947709][T27175] usb usb5: usbfs: process 27175 (syz-executor.4) did not claim interface 0 before use [ 1528.957624][T27180] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1528.986536][T27188] usb usb5: usbfs: process 27188 (syz-executor.5) did not claim interface 0 before use [ 1528.997737][T27188] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:15:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0}) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xee030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) close_range(0xffffffffffffffff, r1, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4004550d, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf0010000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf2020000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1529.061827][T27196] usb usb5: usbfs: process 27196 (syz-executor.4) did not claim interface 0 before use [ 1529.072460][T27196] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1529.079652][T27198] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1529.087092][T27201] usb usb5: usbfs: process 27201 (syz-executor.5) did not claim interface 0 before use 09:15:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) close_range(0xffffffffffffffff, r1, 0x2) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x5, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:15:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0}) 09:15:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf2030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4004551e, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf6030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x40049409, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000100)={0x27ab, 0x5, [{0xd}, {0x6, 0x1}, {0xc, 0x1}, {0x6}, {0x9}]}) 09:15:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) [ 1529.778984][T27218] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1529.792698][T27216] usb usb5: usbfs: process 27216 (syz-executor.4) did not claim interface 0 before use [ 1529.805001][T27216] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4008550c, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xf8030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0}) [ 1529.832355][T27224] usb usb5: usbfs: process 27224 (syz-executor.5) did not claim interface 0 before use [ 1529.861594][T27227] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1529.869152][T27230] usb usb5: usbfs: process 27230 (syz-executor.4) did not claim interface 0 before use [ 1529.879355][T27230] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xfa000000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000100)={0x27ab, 0x5, [{0xd}, {0x6, 0x1}, {0xc, 0x1}, {0x6}, {0x9}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000100)={0x27ab, 0x5, [{0xd}, {0x6, 0x1}, {0xc, 0x1}, {0x6}, {0x9}]}) (async) 09:15:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) 09:15:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0}) 09:15:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0}) 09:15:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xfa030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000100)={0x27ab, 0x5, [{0xd}, {0x6, 0x1}, {0xc, 0x1}, {0x6}, {0x9}]}) 09:15:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xfe030000], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1530.627400][T27241] usb usb5: usbfs: process 27241 (syz-executor.5) did not claim interface 0 before use [ 1530.638254][T27241] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1530.646155][T27244] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1530.653508][T27245] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1530.660650][T27242] usb usb5: usbfs: process 27242 (syz-executor.4) did not claim interface 0 before use 09:15:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0}) 09:15:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4008550d, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0}) 09:15:57 executing program 5: listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/131, 0x83) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x1}, 0x18) [ 1530.681133][T27252] usb usb5: usbfs: process 27252 (syz-executor.5) did not claim interface 0 before use [ 1530.697767][T27252] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1530.718436][T27256] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1530.739651][T27259] usb usb5: usbfs: process 27259 (syz-executor.4) did not claim interface 0 before use [ 1530.756300][T27259] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1530.763528][T27265] usb usb5: usbfs: process 27265 (syz-executor.5) did not claim interface 0 before use 09:15:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x40085511, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0}) 09:15:58 executing program 5: listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/131, 0x83) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x1}, 0x18) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/131, 0x83) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x1}, 0x18) (async) 09:15:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0}) 09:15:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) 09:15:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x4], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x5], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x40086602, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0}) [ 1531.481244][T27274] usb usb5: usbfs: process 27274 (syz-executor.5) did not claim interface 0 before use [ 1531.502165][T27274] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1531.513193][T27270] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1531.520363][T27277] usb usb5: usbfs: process 27277 (syz-executor.4) did not claim interface 0 before use 09:15:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0}) 09:15:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x6], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x40087602, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0}) [ 1531.550398][T27274] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1531.558138][T27290] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:58 executing program 5: listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/131, 0x83) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x1}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x1}, 0x18) 09:15:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x7], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0}) [ 1531.592167][T27293] usb usb5: usbfs: process 27293 (syz-executor.4) did not claim interface 0 before use [ 1531.607911][T27293] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1531.615488][T27301] usb usb5: usbfs: process 27301 (syz-executor.5) did not claim interface 0 before use [ 1531.625824][T27300] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1531.665457][T27307] usb usb5: usbfs: process 27307 (syz-executor.4) did not claim interface 0 before use [ 1531.667222][T27305] xt_check_match: 30 callbacks suppressed [ 1531.667238][T27305] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1531.675356][T27307] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:15:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}) 09:15:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x401c5820, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x3}, 0x9, 0x44, &(0x7f0000002640)="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", 0x198, 0x8001, 0x200, 0x0, 0x3, 0x8000, &(0x7f0000002600)="a750777bba24ebdb706d1bf996f88ccad3288ef99a597361d438d833117325b6f4e982fbf74fe42b009beb83c8237063aa3bca185822f634c982dc9c1193"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000024c0), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002380), 0x8000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f00000023c0)) ioctl$SNAPSHOT_FREE(r3, 0x3305) write$snapshot(r3, 0x0, 0x0) pwritev2(r3, &(0x7f00000012c0)=[{&(0x7f0000001380)="3dd58d00b369303ac6fac70e7c26c67df2c60e1c7091189fb6fe6c6f35a00a60912d619c08b2ef0b18eec44a3230fc0570e2a1e47ad070f3dbe02844430e0108fc475be35d1bb351c7cdbe8105ed7ca1f371fbc0c206cfc8a464be77404f5c5ea76c35a599bcda318af6a8e10e829327889fa0cd17297984143b86e3e9846b8fe03f9df3e7122ad973ddcbb30c841641295365bceed2a5e65b17be4c53974098c72e46fb5180a63e11c6b1e3e0191b584fb938598bf4dce47cc607b750ab16e9eaef81945197f042c0a9d655bec6b37b325007f2f0539db8b8ea59654174adb0f9aaf8bdf2ac8d7a2b6b208076658806194e563776eddba42b51132724a36862888af9a84b0af5c8e1b4739efb20516574245b88052c52c13af48553612333467532d174b071baecfc528a121fc79db3742f6ecd0fba3aab69081c6fb4c834cd1837285f9498b2833180afc28345bf1472021ef565f35cb5f298272f2e93aa3c4173535f4c7635df877800d07a61666f6ac4ccad4eb16df45222c90394337f820e111e146fb281ed231f8268e6333451c78260d655bcef0c4994650b6ea6ff6f5258581688e559c00b1b5de89096bf171ab426b9ddc518a3e41cc7a26eaecc02cb7012b8c8130553e074009f94740d984f9b6f1fa5536da9ad766c26f7b805a4d85b6410702bccfc6d31d719c5f2a66399692e8eb1b1cbadb69adc10525540c54afff5fe42b9a198d602d7add1d73e54598f23ff694a0d7ad8ba927e832324fa6c1d8ff5f51d0de91f32dd4f5d332da04904cb5ae3dc259b90642a789ae90c9323ee801cf1bad149c9baab92155210aa16c2765078c5cba705be4ac2b7a0e0fce90002d15e962d23b0baa7a356f4119c03508fc3f16516ebdef4e7357085c2f79dcc61d5603dbc85e3166dfc339139f064aff698e4dfa65cce4b63c676e83c30992266bdf1080eb6da08166bf9ea47f2e04e191a1d58adfd25ca939e37edf56684505abf76b8f6a39a8cfdd52501d654a16c3d2ae24298198f6757e9240004edd8ed8e5731d02de087782a78ab0df92ff73d1853e2151127142c7d2bb1068a6e92e064800e58f0dc73687dbc296ead8f7f835880f21e9d1e5edeba2858e7c12944da247496598ccd24ae0f5044369f564a740f804892d5c6d378981fc40be4264a41c1bd0770565006b0e5a0dd23ef25e17a26f609cd5efd9adde1d0357eb59935106bc15a6d8ead5b785d46e308065420458807feb1576717350d08c7893a86cfd5c54034ac51133d690606fd0e3837260c99708f9ae9268d008521c4685e51278c0f8a319763d7dc7e0de70b36fdaf32b717cbb14dbe004f023844fea327896633ad659152383575259a0dff9e5c602b50fda871e3ad49c6648f9209a583e466bf80acdc6330bb3811cf3e1d5851cb7038c3e41420dd7675ec83991faa7d4c874f54a1383bd61d4371140ec1701da522b89a424527fcd4f93a0beb6bf6707900913b2194f7727e935f7e4f9d658010c4b4fac9c80403394490d5060949db77b2ae847fab148e43f8ab925d116a6f7d9079d0726fd21e0debe3c137f51ee83a24d67868afab6534ff728ab3a873d30e29580fd40b68e76667edf6e06a07027271b03a7e250c9b769af4856b3cf429848a9a30a81c5a47e17767e2a1f009a15b25a6288b2b61e3b3e039929b73d51275149ddd8750fd3e68952740c588eb32e7af35897661de706ebaf6a58e380f402bd9f6f79ecaa73d16295d5b0b93c196fa2c8c265de62d6890603360c3234295e7945c57658c82bffe079cd746275989ebedd6f5b4ed22d7b77f8b577d84669d5d9aa06a71f9e538fbe7d7104cfbb7d6a1f57c7810fb3ccb9660f61030ed424a11e53dbc1d632c1101e5eb49a24fa15358fd530b2b9af5e58ab16e0980140378d2b5ca026795bd3ba26f75d643639cd8015ef4f9decb5faf9175699feba6a3ae68bd7d576a874cc9c413ba9be39b699c18e94dcda62d98360c15773e3a17095e4de781308210fad26fef32134976201b73c64c58371973ab4d925c08bfc5e02f83d64c9d3258895e7d91c20ac71a296e48857f5f38f4deaa9ae1f26d23ce8e3f532c383d8828b94688a4c8fe6d1873960f009e362c4a1cba7b7f30645819cbf9bd07c5fcb5f7d054f690e655242c8293bc74a4e789fdef5a9c7c1583e37c2408bba305a1a602ab2226b9b8d05620acef04914806fbc4311aae2181e50fea581702f2f225e9f3a88692faf08919d57126b1d066ea998193e84a13b42966faa16cc390c1381f4c776c5b773508282b924f0022096b3aa26bda7f14838498b38141fbbaf8373e06c733a8cc80540be1161caefaf89eec62f9ca5d24910a38491b7961cce31795ab31d17b9cea7e4783f28010fb6b00db969f3dca1a819025b4e59dabec96bfc80a378196305394fedead1a545a4eb44cddbebe5ef01b75b23bed3797a095536ba0dc451288d8d3d72bd001b10366b66294c32fe17d2a333a6141f721aa3047538691fe32e361d25462bb271e642f502716db8435302281c9f93ff7a75a522c38863c58efc3bdda0bceaf0bb8f12c7c0385731add1d5f46096560d7c9fa88e7d1a20147440b7c8c78d18053438e18500c175c38e6c55bb4ac5c6a58bb0e28cc771b4092efe7eafa51bf838c5a9986752542242eece7ceb28c8fc9efeaa08c7b641fdb67c25624d0804f8a2336783208327bd15d949fddb1424d2c2702ecb616011973fbaf486d3359d99c7477b5d70eb18a90bb83eaa56b934afcc436dafed29699d242ad40f0c4f4c18ce6fca0e6748a27b9c9f7ffd03f3ba18d16d7d1b2b93b98a783d1188bff101bd70520e46e3c8103d7e85b8ac612eae0891ee83233e8c75c66321f139174a95b7cb5bd6d036760c731df908feb219735923efd6a0162a9b1755815f73aea9bf268877c27ba8a211631d63ae230e1a89a0e0237f12eb4a4bccbfbbfa51ccc5e7cfc70d76730b432ed5d7dc7756fd5a643ca3d5a098bce48dc6b53c8cc1a7fe02ef027cd60f5b2c96676dd0f046bcd7775c83f2f603b2d77d1654be8a4b725d2387ecd8032a7883f963a8989433b34bad8678c16299d1cfcda0163588428f787b374ddf869d74f979501be0e6471d42dfb465f0538edf75b28f7ec32b8f2ce97259afce73f4538750273525631c58978760287a0f4d7257b515b61967854dc2051be3b10d06f9e1b356304a76223c4492c9539d103fc03e7b2d5528545080d96dc61991a54330f7e669a314da0a4b6288ff928a2542dcb719849c810e424e900454fe6994b1f4d3f6770d349316dec258929ff27117a252bfd5c445e12b6070c799bbf059ea7904867ecac78ead9572ea0741d1a07ae843ac3eb8f602847c438616ae9a18a5ab3e52360a083eb4ee4791f2597821f8c2d3905bf66a0cddf769c268180305cdc3eb3ebeb426847eac08b330f47c7091a782b41de7f9506d0b3063b2caa1b2e79a9335813e829b338d453f20c30eb21354e6bd828f1a5f95fc294b187a1f88bae13397f57e3d3016b7e5d6115859d73bbaa58516a35a87b0145d802993900d3fd0aa04caff001732997294c78c128c6e671b88f30134c15967c9ee5a00deea912ad8e786e583c2bb19c5892a197741826c9a851a947713e659878b576f5c888c8b7f32b6140c8e1235f8b8d5b27b84c045be6e7ea42ecd5307e08fd8e4ae4954dfc2802e6b7ce2424a0e7969784f139866fecaf9a0bc00a5e82b2ab56328b1e6f0f4c6ca37c1e4c4adef9caa06754a3ec03645a7c7597bed6e9d6e1a6a2be3caaad446adbf948d0ae8711aa28b8725e1081fb7fe6abe88414493d87a3e6aff8bd4c6688bea5f405db76f7d17886b4a6fdc1869eacdbb4443319034319d990e1d3feb4e1b537f610c6d6385cf1b70234b926e49fca40878a273db7dc2e95b844fcfa4193dbf379e4b0bb1e408faf629deff9e4a2b00774296bb04a9e2a712aff157d07b94d3e77bee9c477e445a646dca06dd68564a1112ff949c1f28f89d7b9509ccb1ca3ff7836c7dd0e7b3d16e9a0ad44084f8df8b81dbd44b04ac96bf728eb1f9049eb91a40f9979aa9e37604de09935aefd556cfdd732bb7d492fb1d8244905d686e0e7ac65c18712abd3f886b9e9e1a79535b36142364a2449b139b373f02c6ad42ec5a605abfb72ffe1ceb33961d5aba1af3a0bfed8bb00ad692e5719ef59e9e82b5f95c1dc43eab1a5beee5d7df81052181ece3cca14d861bb1a100e59e3e5e63f2fc70328ad3829db9bf91d0f0c0374475505d58763fdb9dd2114df726c11cfe13288724bb271c723f69fd2bd273b1f1270f94a98b7f74aebabdedb472352f78adabbadfebea356ce16925f4d81552fabf237d7817d75ff863e31f5efdaec2e6937a37cad56aad6772cfd9264a8ed35524c7b797ca0e0a8b43deae6aa4e90b83f8e6ce2b4e791290bf132de9aa3aec15c38a63b8b375f4bac26095f8e27ad1d569297af738a4e1ee0a4c9ffedf2567fce512512fe393c88a09c814f70dd0c08d5fd9485a1c1d77f716985b7cfd61355171a9ad783b3f90149c56401358ad892587d5f309fc05298315a68de89db0883f4ec69f3448eee40e431dc5d6dc965b3cf376a181bc4de78c90fbefd12be3d615cd6ed9decfe8edfcb9ad8a3ca5376df6d9026b35c980d26724f8025606eecf87acab79dbc883a14aed3ee5c1e23aff9c40776d5c18f886fd09f51dc9dcdc1fed33f1eefc60202bc305ff7655e02620a67a103feadbad966b78872eb1bd37ab66ef0c2caba6532d96c2f70f98ca53bc829cb302b359ae0705816dbdae08ff141bfb3b8d793ff85bc9a36f0485ca15dfcffd4f790ff031ca4f1f302aacd64ad12bf67c190f8357ddda8b75d1a9bb90ffa7f4788edef0db4799f8a3c2f93792c99018e1a52c9520ca0eb699170d75f1fffe7bc2934512e52316197a6fd36e4882efe565591eb1c098249097fb1e35f62e86ba1512b7a563ac2396aeac63e145e9a67307aa0623f0d8fb27c83ae297d936c2702dc99995ffe70ad7fd3397976f5251a788ffe6f5d457754c9696f7e495618580f8b93e0a73adfd39c316c552e76c818924340e999f1448ae1aeabbf83b4002e9b43479cff2bde582a7c06716176aa606c768a61ab73b788cb67e5582da35be9f6630d7d2b2c56cf0b012d20c7c54e392316c9e32ce4cb1b36f222fd32867c1b7b61b796365554d22d953ec9b1d108ee37ab780d7403a2e223e8f285b992164a62e36fe6a30cf509a549c2c389ef6146fac0048dd0b568b78971e77e24316b286d70cf395b7b17921d472b1486217c378ef7b56bb079ff576bf73425e402dec09505c91c393be92613096da43adf313a91b35064b7dedb5fbaba5ba44b1d3397fcb51c623abf7ef8383353853dd2aa86c2da5f4c93614835128009c451094da379a82ebec2f677d2bca7f24b87cd4b04c103d022cfe71e11b0fa9e35bae145ff82ab5e04c811bb5448dec06afde410d71c382f462bdef77830cd465ae841e43a8620d3236fd1e50609f0c75344261e26a1931f96b740da29be682051d0c18955aff8d7596c9cb56b6d128ff0be315abc3a6a28b999f286b3c992f3412cbc39aaf1365932e6dbba2a550f04c6ff7001070d2d9dd4187c78247a9ed568ff51182d7626f69f6d400d7f926351766f65f11fe04503cebe17164d8265a3cd718220502e1ef6b987556bf25916c498d3f6c1468126fefe9917e3a1842da526b3355e78c37ea35d19317d659bea4dd4d0e41ec2b24e7f6e6edbaae88aa9", 0x1000}], 0x1, 0x8, 0x5, 0x11) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) write$snapshot(r5, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000001300)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000002400)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) write$snapshot(r6, &(0x7f0000002440)="db534d704c5128eed01cd41815067cfff214d563c0f19a7543e7a2f796b5b3e18bd3e64ad91d628977314830b9831e9d6d51af3e367869244c0a0e9ae0d4d6335886538d3d7c89287925dc924a", 0x4d) write$snapshot(r1, 0x0, 0x0) preadv(r1, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/117, 0x75}], 0x4, 0x401, 0x7) 09:15:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}) 09:15:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) 09:15:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x9], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1532.342988][T27309] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1532.347570][T27316] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1532.366155][T27319] usb usb5: usbfs: process 27319 (syz-executor.4) did not claim interface 0 before use [ 1532.381686][T27321] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:15:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x3}, 0x9, 0x44, &(0x7f0000002640)="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", 0x198, 0x8001, 0x200, 0x0, 0x3, 0x8000, &(0x7f0000002600)="a750777bba24ebdb706d1bf996f88ccad3288ef99a597361d438d833117325b6f4e982fbf74fe42b009beb83c8237063aa3bca185822f634c982dc9c1193"}) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000024c0), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002380), 0x8000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f00000023c0)) (async) ioctl$SNAPSHOT_FREE(r3, 0x3305) (async) write$snapshot(r3, 0x0, 0x0) (async) pwritev2(r3, &(0x7f00000012c0)=[{&(0x7f0000001380)="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", 0x1000}], 0x1, 0x8, 0x5, 0x11) (async) ioctl$SNAPSHOT_FREE(r2, 0x3305) (async) write$snapshot(r2, 0x0, 0x0) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) (async) write$snapshot(r5, 0x0, 0x0) (async) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000001300)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000002400)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) write$snapshot(r6, &(0x7f0000002440)="db534d704c5128eed01cd41815067cfff214d563c0f19a7543e7a2f796b5b3e18bd3e64ad91d628977314830b9831e9d6d51af3e367869244c0a0e9ae0d4d6335886538d3d7c89287925dc924a", 0x4d) write$snapshot(r1, 0x0, 0x0) (async) preadv(r1, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/117, 0x75}], 0x4, 0x401, 0x7) 09:15:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x4020940d, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0}) 09:15:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:15:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0}) 09:15:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x41045508, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1532.392380][T27319] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1532.431795][T27327] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:15:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0}) 09:15:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x3}, 0x9, 0x44, &(0x7f0000002640)="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", 0x198, 0x8001, 0x200, 0x0, 0x3, 0x8000, &(0x7f0000002600)="a750777bba24ebdb706d1bf996f88ccad3288ef99a597361d438d833117325b6f4e982fbf74fe42b009beb83c8237063aa3bca185822f634c982dc9c1193"}) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000024c0), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002380), 0x8000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f00000023c0)) (async) ioctl$SNAPSHOT_FREE(r3, 0x3305) (async) write$snapshot(r3, 0x0, 0x0) (async) pwritev2(r3, &(0x7f00000012c0)=[{&(0x7f0000001380)="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", 0x1000}], 0x1, 0x8, 0x5, 0x11) (async) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) (async) write$snapshot(r5, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000001300)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000002400)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) write$snapshot(r6, &(0x7f0000002440)="db534d704c5128eed01cd41815067cfff214d563c0f19a7543e7a2f796b5b3e18bd3e64ad91d628977314830b9831e9d6d51af3e367869244c0a0e9ae0d4d6335886538d3d7c89287925dc924a", 0x4d) (async) write$snapshot(r1, 0x0, 0x0) (async) preadv(r1, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/117, 0x75}], 0x4, 0x401, 0x7) 09:15:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045503, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:15:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f00000000c0)={0x746d, 0xd, [{0x71}, {0x1, 0x1}, {0xc, 0x1}, {0x1}, {0xe}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x9}, {0x0, 0x1}, {0x8}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) fchown(r2, r4, 0xee00) [ 1532.455295][T27336] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1532.466420][T27338] usb usb5: usbfs: process 27338 (syz-executor.4) did not claim interface 0 before use [ 1532.485292][T27338] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1532.493054][T27344] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1532.520108][T27351] usb usb5: usbfs: process 27351 (syz-executor.5) did not claim interface 0 before use [ 1532.531541][T27351] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1532.539422][ T27] audit: type=1400 audit(1702286159.736:166897): avc: denied { setattr } for pid=27350 comm="syz-executor.5" name="SCTPv6" dev="sockfs" ino=527754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 09:16:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xb], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0}) 09:16:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0}) 09:16:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f00000000c0)={0x746d, 0xd, [{0x71}, {0x1, 0x1}, {0xc, 0x1}, {0x1}, {0xe}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x9}, {0x0, 0x1}, {0x8}]}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) (async, rerun: 64) fchown(r2, r4, 0xee00) (rerun: 64) 09:16:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x7b9be470, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xc], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1533.217506][T27363] usb usb5: usbfs: process 27363 (syz-executor.5) did not claim interface 0 before use [ 1533.228981][T27359] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1533.239693][T27363] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1533.250354][T27362] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1533.257825][T27364] usb usb5: usbfs: interface 0 claimed by usbfs while 'syz-executor.3' sets config #2 09:16:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8004550f, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0}) 09:16:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f00000000c0)={0x746d, 0xd, [{0x71}, {0x1, 0x1}, {0xc, 0x1}, {0x1}, {0xe}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x9}, {0x0, 0x1}, {0x8}]}) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f00000000c0)={0x746d, 0xd, [{0x71}, {0x1, 0x1}, {0xc, 0x1}, {0x1}, {0xe}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x9}, {0x0, 0x1}, {0x8}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) fchown(r2, r4, 0xee00) (async) fchown(r2, r4, 0xee00) 09:16:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0}) 09:16:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xd], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1533.260917][T27368] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1533.291884][T27372] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045510, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0}) [ 1533.319575][T27377] usb usb5: usbfs: process 27377 (syz-executor.4) did not claim interface 0 before use [ 1533.339244][T27381] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1533.349877][T27377] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1533.357324][T27383] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}) 09:16:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xe], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1533.364786][T27378] usb usb5: usbfs: process 27378 (syz-executor.5) did not claim interface 0 before use [ 1533.403665][T27391] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1533.406447][T27389] usb usb5: usbfs: process 27389 (syz-executor.4) did not claim interface 0 before use [ 1533.435528][T27389] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0}) 09:16:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x10], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045518, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0}) 09:16:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) getgroups(0x7, &(0x7f00000006c0)=[0xee00, 0xee00, 0xee01, 0xee01, 0xee01, 0x0, 0xee00]) r5 = getpgrp(0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) r8 = getegid() r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r10, 0x3305) write$snapshot(r10, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x400000, 0x0) ioctl$SNAPSHOT_S2RAM(r12, 0x330b) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x208100, 0x0) r14 = geteuid() getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r17) statx(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, 0x200, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000140)="a7624a0f20451e00af9778a7d43d9c58f7e1a2a0daa6701361269fbc1b9d8304faab28fdae79f7923ca41a062f1f852bf7937e2161371631be1d0a72549d66a681dcc003302a1d9d3a25a2cfe62d77be4ff36dbfed04eed49d981470fefb3627d57dafbd715469b015cfb176332dbcf6128011b96d4f5dc66047", 0x7a}, {&(0x7f00000001c0)="9a991bc1d4f2a71d339a678812b88d163f8f69af8f7b6b2fd2cc15c039324f5fdc18d028a59320983e4d9b3d5100b1f8abcc41d09c444d88cf41eb065fd358a69925038092641d8f836b3f7fee2b852d56aeae6bef9531ec794c7d1cd962a51e13393d25fbea1dcd609f2195ce74556dcbadb499a5b7007fe0b50bd7509908b2701fff90924738248f926a100e9fb419d99790ba3d44311f9d3a51eb914876030af667b2", 0xa4}, {&(0x7f0000000280)="708a09444b31bce6b2606dd76372b6dc46a42157b5c65b6526417319ef288e0f45bd2c96a518ff3788f0f113384c03335d4c762ad0b9cf8dcf5914031c7f8f0c22087fefb1c52fa3837e849ca1174c736dd1b2a2db6a89bb5b001330b6939e2c37d177e4718cc49e76c6304d840739878879417605eca99a429dd95c0323fe36932b6affbf829aa1215885b0922485f4bf6b1601704c3c81af32244022feb7c27aee8cff009c9b76a85b03b257e07c045ea308fc11cc9637769b24cdee6aff12e5b44788156c5fdbfa7ffe77d2c0c3f4", 0xd0}, {&(0x7f0000000380)="6a137a065baa9ea33a5109af14a69a9f790a4729a914c4a3f299482468447e737dff288d98edb1403fe44cdaf327c842672347065d58a9d19554b89abdffedcfc3d744fde6c429ff988036e52239199bf0c96311a1e62f07a134740ee98d0ad340a6237d385ae96a9876825c24787b4c26c24861a4cb6cb20be4be2069b2921be0", 0x81}, {&(0x7f0000000440)="4b4106837f47c914faec6464ee46f670b9dae12b0ac435b5ff644d0336027cfe183bdd6cb129450a69b1a5177b9ca7bc8fc7ba5c295071e2eb3b82000797d4f2989c587f5b2d42e2f748291c2cd021c270af6c2836c034b82412d8b4ed4613ee3f104277c4874a889938f90b910fc95aad770505d35c6ad62ee4b1c908c148bcbfb8", 0x82}, {&(0x7f0000000500)="1d66e15c33eff5bebc132bfe0677e073d6955638e4e886a5d8dd9fd0433ac72385fe66b3ecb0", 0x26}, {&(0x7f0000000540)="2aaebaee9b5fab2e7a7ec66c73465f4185ed257192e7f6903fd6681e9f0f65924b9a6ab171dd983d38376503ee247341626cc412052e98337bac33791f75e44e46d89712f27a25d6bab47cc1b2cd37b80abf64afc1d464021c8f91f4bcd76611d13834abaedee7f1fea65b", 0x6b}], 0x7, &(0x7f00000009c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r9, r10, r11, 0xffffffffffffffff, r13]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r18}}}], 0xf0, 0x4000}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045519, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0}) 09:16:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x11], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0}) 09:16:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8004551a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1534.069423][T27398] usb usb5: usbfs: process 27398 (syz-executor.4) did not claim interface 0 before use [ 1534.081878][T27399] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1534.093818][T27398] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1534.101854][T27404] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1534.109007][T27402] usb usb5: usbfs: process 27402 (syz-executor.5) did not claim interface 0 before use 09:16:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) getgroups(0x7, &(0x7f00000006c0)=[0xee00, 0xee00, 0xee01, 0xee01, 0xee01, 0x0, 0xee00]) r5 = getpgrp(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) (async) setreuid(0x0, r7) getegid() (async) r8 = getegid() r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (async) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r10, 0x3305) write$snapshot(r10, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) (async) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x400000, 0x0) ioctl$SNAPSHOT_S2RAM(r12, 0x330b) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x208100, 0x0) r14 = geteuid() getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r17) (async) setreuid(0x0, r17) statx(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, 0x200, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000140)="a7624a0f20451e00af9778a7d43d9c58f7e1a2a0daa6701361269fbc1b9d8304faab28fdae79f7923ca41a062f1f852bf7937e2161371631be1d0a72549d66a681dcc003302a1d9d3a25a2cfe62d77be4ff36dbfed04eed49d981470fefb3627d57dafbd715469b015cfb176332dbcf6128011b96d4f5dc66047", 0x7a}, {&(0x7f00000001c0)="9a991bc1d4f2a71d339a678812b88d163f8f69af8f7b6b2fd2cc15c039324f5fdc18d028a59320983e4d9b3d5100b1f8abcc41d09c444d88cf41eb065fd358a69925038092641d8f836b3f7fee2b852d56aeae6bef9531ec794c7d1cd962a51e13393d25fbea1dcd609f2195ce74556dcbadb499a5b7007fe0b50bd7509908b2701fff90924738248f926a100e9fb419d99790ba3d44311f9d3a51eb914876030af667b2", 0xa4}, {&(0x7f0000000280)="708a09444b31bce6b2606dd76372b6dc46a42157b5c65b6526417319ef288e0f45bd2c96a518ff3788f0f113384c03335d4c762ad0b9cf8dcf5914031c7f8f0c22087fefb1c52fa3837e849ca1174c736dd1b2a2db6a89bb5b001330b6939e2c37d177e4718cc49e76c6304d840739878879417605eca99a429dd95c0323fe36932b6affbf829aa1215885b0922485f4bf6b1601704c3c81af32244022feb7c27aee8cff009c9b76a85b03b257e07c045ea308fc11cc9637769b24cdee6aff12e5b44788156c5fdbfa7ffe77d2c0c3f4", 0xd0}, {&(0x7f0000000380)="6a137a065baa9ea33a5109af14a69a9f790a4729a914c4a3f299482468447e737dff288d98edb1403fe44cdaf327c842672347065d58a9d19554b89abdffedcfc3d744fde6c429ff988036e52239199bf0c96311a1e62f07a134740ee98d0ad340a6237d385ae96a9876825c24787b4c26c24861a4cb6cb20be4be2069b2921be0", 0x81}, {&(0x7f0000000440)="4b4106837f47c914faec6464ee46f670b9dae12b0ac435b5ff644d0336027cfe183bdd6cb129450a69b1a5177b9ca7bc8fc7ba5c295071e2eb3b82000797d4f2989c587f5b2d42e2f748291c2cd021c270af6c2836c034b82412d8b4ed4613ee3f104277c4874a889938f90b910fc95aad770505d35c6ad62ee4b1c908c148bcbfb8", 0x82}, {&(0x7f0000000500)="1d66e15c33eff5bebc132bfe0677e073d6955638e4e886a5d8dd9fd0433ac72385fe66b3ecb0", 0x26}, {&(0x7f0000000540)="2aaebaee9b5fab2e7a7ec66c73465f4185ed257192e7f6903fd6681e9f0f65924b9a6ab171dd983d38376503ee247341626cc412052e98337bac33791f75e44e46d89712f27a25d6bab47cc1b2cd37b80abf64afc1d464021c8f91f4bcd76611d13834abaedee7f1fea65b", 0x6b}], 0x7, &(0x7f00000009c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r9, r10, r11, 0xffffffffffffffff, r13]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r18}}}], 0xf0, 0x4000}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1534.161594][T27410] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1534.170414][T27413] usb usb5: usbfs: process 27413 (syz-executor.4) did not claim interface 0 before use [ 1534.188759][T27413] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1534.195955][T27411] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1534.204440][T27416] usb usb5: usbfs: process 27416 (syz-executor.5) did not claim interface 0 before use [ 1534.214340][T27418] usb usb5: usbfs: process 27418 (syz-executor.5) did not claim interface 0 before use 09:16:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x123, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x12], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) (async) write$snapshot(r2, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) (async) getgroups(0x7, &(0x7f00000006c0)=[0xee00, 0xee00, 0xee01, 0xee01, 0xee01, 0x0, 0xee00]) (async) r5 = getpgrp(0xffffffffffffffff) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) (async) r8 = getegid() (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4) (async) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r10, 0x3305) (async) write$snapshot(r10, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) (async) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x400000, 0x0) ioctl$SNAPSHOT_S2RAM(r12, 0x330b) (async) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x208100, 0x0) (async) r14 = geteuid() (async) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r17) (async) statx(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0, 0x200, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000140)="a7624a0f20451e00af9778a7d43d9c58f7e1a2a0daa6701361269fbc1b9d8304faab28fdae79f7923ca41a062f1f852bf7937e2161371631be1d0a72549d66a681dcc003302a1d9d3a25a2cfe62d77be4ff36dbfed04eed49d981470fefb3627d57dafbd715469b015cfb176332dbcf6128011b96d4f5dc66047", 0x7a}, {&(0x7f00000001c0)="9a991bc1d4f2a71d339a678812b88d163f8f69af8f7b6b2fd2cc15c039324f5fdc18d028a59320983e4d9b3d5100b1f8abcc41d09c444d88cf41eb065fd358a69925038092641d8f836b3f7fee2b852d56aeae6bef9531ec794c7d1cd962a51e13393d25fbea1dcd609f2195ce74556dcbadb499a5b7007fe0b50bd7509908b2701fff90924738248f926a100e9fb419d99790ba3d44311f9d3a51eb914876030af667b2", 0xa4}, {&(0x7f0000000280)="708a09444b31bce6b2606dd76372b6dc46a42157b5c65b6526417319ef288e0f45bd2c96a518ff3788f0f113384c03335d4c762ad0b9cf8dcf5914031c7f8f0c22087fefb1c52fa3837e849ca1174c736dd1b2a2db6a89bb5b001330b6939e2c37d177e4718cc49e76c6304d840739878879417605eca99a429dd95c0323fe36932b6affbf829aa1215885b0922485f4bf6b1601704c3c81af32244022feb7c27aee8cff009c9b76a85b03b257e07c045ea308fc11cc9637769b24cdee6aff12e5b44788156c5fdbfa7ffe77d2c0c3f4", 0xd0}, {&(0x7f0000000380)="6a137a065baa9ea33a5109af14a69a9f790a4729a914c4a3f299482468447e737dff288d98edb1403fe44cdaf327c842672347065d58a9d19554b89abdffedcfc3d744fde6c429ff988036e52239199bf0c96311a1e62f07a134740ee98d0ad340a6237d385ae96a9876825c24787b4c26c24861a4cb6cb20be4be2069b2921be0", 0x81}, {&(0x7f0000000440)="4b4106837f47c914faec6464ee46f670b9dae12b0ac435b5ff644d0336027cfe183bdd6cb129450a69b1a5177b9ca7bc8fc7ba5c295071e2eb3b82000797d4f2989c587f5b2d42e2f748291c2cd021c270af6c2836c034b82412d8b4ed4613ee3f104277c4874a889938f90b910fc95aad770505d35c6ad62ee4b1c908c148bcbfb8", 0x82}, {&(0x7f0000000500)="1d66e15c33eff5bebc132bfe0677e073d6955638e4e886a5d8dd9fd0433ac72385fe66b3ecb0", 0x26}, {&(0x7f0000000540)="2aaebaee9b5fab2e7a7ec66c73465f4185ed257192e7f6903fd6681e9f0f65924b9a6ab171dd983d38376503ee247341626cc412052e98337bac33791f75e44e46d89712f27a25d6bab47cc1b2cd37b80abf64afc1d464021c8f91f4bcd76611d13834abaedee7f1fea65b", 0x6b}], 0x7, &(0x7f00000009c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r9, r10, r11, 0xffffffffffffffff, r13]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r18}}}], 0xf0, 0x4000}, 0x10) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0}) 09:16:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80085504, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x25], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1534.929430][T27425] usb usb5: usbfs: process 27425 (syz-executor.5) did not claim interface 0 before use [ 1534.949892][T27425] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1534.957260][T27429] usb usb5: usbfs: process 27429 (syz-executor.4) did not claim interface 0 before use [ 1534.967334][T27426] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x9, 0x132, &(0x7f00000000c0)="7484a21560fdee03572815abbd2ea787fe2bb13cfcc92b50877d6282e3e9623bbb5cb39898060a979b4e0a1fc455a5a9331f6a220e6ece4daccbe50f70f686cbf3"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x13}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0}) [ 1534.974869][T27432] usb usb5: usbfs: process 27432 (syz-executor.3) did not claim interface 2 before use 09:16:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8008550e, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1535.007651][T27442] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1535.020218][T27445] usb usb5: usbfs: process 27445 (syz-executor.4) did not claim interface 0 before use [ 1535.041729][T27445] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x9, 0x132, &(0x7f00000000c0)="7484a21560fdee03572815abbd2ea787fe2bb13cfcc92b50877d6282e3e9623bbb5cb39898060a979b4e0a1fc455a5a9331f6a220e6ece4daccbe50f70f686cbf3"}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x13}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8008551c, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1535.049374][T27446] usb usb5: usbfs: process 27446 (syz-executor.5) did not claim interface 0 before use [ 1535.077308][T27453] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1535.098096][T27455] usb usb5: usbfs: process 27455 (syz-executor.5) did not claim interface 0 before use [ 1535.108255][T27455] vhci_hcd: default hub control req: a113 v0000 i0000 l0 09:16:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x44], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0}) 09:16:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8008551d, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x9, 0x132, &(0x7f00000000c0)="7484a21560fdee03572815abbd2ea787fe2bb13cfcc92b50877d6282e3e9623bbb5cb39898060a979b4e0a1fc455a5a9331f6a220e6ece4daccbe50f70f686cbf3"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x13}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x9, 0x132, &(0x7f00000000c0)="7484a21560fdee03572815abbd2ea787fe2bb13cfcc92b50877d6282e3e9623bbb5cb39898060a979b4e0a1fc455a5a9331f6a220e6ece4daccbe50f70f686cbf3"}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0x13}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 09:16:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x48], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80086601, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x4c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x302, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x10000, 0x5, &(0x7f00000000c0)="8a0f11a009575b7036666d0f248364cccafec3083827d1fefcf9bea54b5d72b41591c887b38a37ac1485c5423ca433a580c16f07f5493d4795a4a0f8958cdb443146b81fb13cb9d8f0b11788000d1bf5ec81b7972e0f3c15cd6bd35dc0d19d716ce318f16cf45241f6c3aa9bbe44735d22b432cca9ef5337234da4920b464f2346ffbfde6d6750a30ad57a436e0bb629b50b04f329589ae227330e49eb32e9e3fa6e2e98597dda0d3b2f8eeaf54a28b55f041e8fd2ec26c67fbb7686891222fe85cf489057b4"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000002c0)={0x5, 0xb, 0x8, 0xffe0, 0xa9, 0x7, &(0x7f0000000200)="e8e6f23e37185b0c83cb99ea37c9b466992158450978a78466001ede35c8c62861e5d3017e3778cd5f96ffabce148e2a49c72d4a5fae9587cac0424af09da7aa407f88199d7393ad7862e2678523c2711ad85d1312ce6e02aca029739f3740322c19ccc29f4b5b1e6ce9eeec278aeb390a1d73d0cf9aaeb91a8ca72572c6b644b4f06df7643564a50ce1ba5c6c4f253c3da9da075516a2828086c3b878c554a753364b929c21ccdbeb"}) [ 1535.799658][T27463] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1535.807190][T27467] usb usb5: usbfs: process 27467 (syz-executor.4) did not claim interface 0 before use [ 1535.830056][T27467] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1535.837209][T27466] usb usb5: usbfs: process 27466 (syz-executor.5) did not claim interface 0 before use 09:16:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x52], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0}) 09:16:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80087601, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x320, 0x0, 0x0, 0x0, 0x0}) [ 1535.872229][T27481] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1535.887621][T27483] usb usb5: usbfs: process 27483 (syz-executor.5) did not claim interface 0 before use [ 1535.898598][T27483] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x60], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x68], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1535.924981][T27491] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1535.936944][T27483] vhci_hcd: invalid port number 224 [ 1535.942150][T27483] vhci_hcd: default hub control req: 050b v0008 i00e0 l169 [ 1535.960470][T27492] usb usb5: usbfs: process 27492 (syz-executor.4) did not claim interface 0 before use 09:16:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x323, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8010550e, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x10000, 0x5, &(0x7f00000000c0)="8a0f11a009575b7036666d0f248364cccafec3083827d1fefcf9bea54b5d72b41591c887b38a37ac1485c5423ca433a580c16f07f5493d4795a4a0f8958cdb443146b81fb13cb9d8f0b11788000d1bf5ec81b7972e0f3c15cd6bd35dc0d19d716ce318f16cf45241f6c3aa9bbe44735d22b432cca9ef5337234da4920b464f2346ffbfde6d6750a30ad57a436e0bb629b50b04f329589ae227330e49eb32e9e3fa6e2e98597dda0d3b2f8eeaf54a28b55f041e8fd2ec26c67fbb7686891222fe85cf489057b4"}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000002c0)={0x5, 0xb, 0x8, 0xffe0, 0xa9, 0x7, &(0x7f0000000200)="e8e6f23e37185b0c83cb99ea37c9b466992158450978a78466001ede35c8c62861e5d3017e3778cd5f96ffabce148e2a49c72d4a5fae9587cac0424af09da7aa407f88199d7393ad7862e2678523c2711ad85d1312ce6e02aca029739f3740322c19ccc29f4b5b1e6ce9eeec278aeb390a1d73d0cf9aaeb91a8ca72572c6b644b4f06df7643564a50ce1ba5c6c4f253c3da9da075516a2828086c3b878c554a753364b929c21ccdbeb"}) 09:16:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0}) 09:16:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x6c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x801c581f, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x6f], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1536.646713][T27499] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1536.663265][T27507] usb usb5: usbfs: process 27507 (syz-executor.4) did not claim interface 0 before use [ 1536.684137][T27507] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x2500, 0x0, 0x0}) 09:16:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0}) [ 1536.692651][T27512] usb usb5: usbfs: process 27512 (syz-executor.5) did not claim interface 0 before use [ 1536.698557][T27516] xt_check_match: 12 callbacks suppressed [ 1536.698573][T27516] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1536.719645][T27513] vhci_hcd: invalid port number 224 [ 1536.721552][T27514] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1536.731860][T27513] vhci_hcd: default hub control req: 050b v0008 i00e0 l169 [ 1536.752187][T27521] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1536.772049][T27523] usb usb5: usbfs: process 27523 (syz-executor.4) did not claim interface 0 before use [ 1536.785889][T27523] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x74], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80385510, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}) 09:16:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x2e75, 0x0, 0x0}) 09:16:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x10000, 0x5, &(0x7f00000000c0)="8a0f11a009575b7036666d0f248364cccafec3083827d1fefcf9bea54b5d72b41591c887b38a37ac1485c5423ca433a580c16f07f5493d4795a4a0f8958cdb443146b81fb13cb9d8f0b11788000d1bf5ec81b7972e0f3c15cd6bd35dc0d19d716ce318f16cf45241f6c3aa9bbe44735d22b432cca9ef5337234da4920b464f2346ffbfde6d6750a30ad57a436e0bb629b50b04f329589ae227330e49eb32e9e3fa6e2e98597dda0d3b2f8eeaf54a28b55f041e8fd2ec26c67fbb7686891222fe85cf489057b4"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000002c0)={0x5, 0xb, 0x8, 0xffe0, 0xa9, 0x7, &(0x7f0000000200)="e8e6f23e37185b0c83cb99ea37c9b466992158450978a78466001ede35c8c62861e5d3017e3778cd5f96ffabce148e2a49c72d4a5fae9587cac0424af09da7aa407f88199d7393ad7862e2678523c2711ad85d1312ce6e02aca029739f3740322c19ccc29f4b5b1e6ce9eeec278aeb390a1d73d0cf9aaeb91a8ca72572c6b644b4f06df7643564a50ce1ba5c6c4f253c3da9da075516a2828086c3b878c554a753364b929c21ccdbeb"}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x10000, 0x5, &(0x7f00000000c0)="8a0f11a009575b7036666d0f248364cccafec3083827d1fefcf9bea54b5d72b41591c887b38a37ac1485c5423ca433a580c16f07f5493d4795a4a0f8958cdb443146b81fb13cb9d8f0b11788000d1bf5ec81b7972e0f3c15cd6bd35dc0d19d716ce318f16cf45241f6c3aa9bbe44735d22b432cca9ef5337234da4920b464f2346ffbfde6d6750a30ad57a436e0bb629b50b04f329589ae227330e49eb32e9e3fa6e2e98597dda0d3b2f8eeaf54a28b55f041e8fd2ec26c67fbb7686891222fe85cf489057b4"}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000002c0)={0x5, 0xb, 0x8, 0xffe0, 0xa9, 0x7, &(0x7f0000000200)="e8e6f23e37185b0c83cb99ea37c9b466992158450978a78466001ede35c8c62861e5d3017e3778cd5f96ffabce148e2a49c72d4a5fae9587cac0424af09da7aa407f88199d7393ad7862e2678523c2711ad85d1312ce6e02aca029739f3740322c19ccc29f4b5b1e6ce9eeec278aeb390a1d73d0cf9aaeb91a8ca72572c6b644b4f06df7643564a50ce1ba5c6c4f253c3da9da075516a2828086c3b878c554a753364b929c21ccdbeb"}) (async) [ 1537.510019][T27529] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1537.516494][T27532] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1537.527826][T27533] usb usb5: usbfs: process 27533 (syz-executor.4) did not claim interface 0 before use [ 1537.537728][T27533] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1537.545003][T27534] usb usb5: usbfs: process 27534 (syz-executor.5) did not claim interface 0 before use 09:16:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80385525, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0}) 09:16:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x3075, 0x0, 0x0}) 09:16:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x7a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1537.558393][T27534] vhci_hcd: invalid port number 224 [ 1537.563659][T27534] vhci_hcd: default hub control req: 050b v0008 i00e0 l169 [ 1537.597115][T27540] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x803855bd, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0}) [ 1537.610053][T27545] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1537.622004][T27543] usb usb5: usbfs: process 27543 (syz-executor.4) did not claim interface 0 before use [ 1537.639494][T27543] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1537.650592][T27553] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x9e], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa0, 0x80000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0}) 09:16:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8108551b, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0}) 09:16:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0045878, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xaa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1538.370813][T27561] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1538.380379][T27564] usb usb5: usbfs: process 27564 (syz-executor.5) did not claim interface 0 before use [ 1538.396854][T27564] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1538.404238][T27565] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0045878, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0}) 09:16:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}) 09:16:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc00c5512, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1538.411932][T27562] usb usb5: usbfs: process 27562 (syz-executor.4) did not claim interface 0 before use [ 1538.438803][T27570] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:16:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa0, 0x80000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0xa0, 0x80000) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 1538.466873][T27577] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1538.475612][T27578] usb usb5: usbfs: process 27578 (syz-executor.4) did not claim interface 0 before use [ 1538.492573][T27578] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1538.507747][T27580] usb usb5: usbfs: process 27580 (syz-executor.5) did not claim interface 0 before use [ 1538.520836][T27580] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1538.531856][T27583] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xb4], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xc20, 0x0, 0x0, 0x0, 0x0}) 09:16:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0}) 09:16:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa0, 0x80000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d", 0x0, 0xc}) 09:16:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xc0], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1539.235798][T27590] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1539.236292][T27589] usb usb5: usbfs: process 27589 (syz-executor.4) did not claim interface 0 before use [ 1539.262169][T27598] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1539.262443][T27589] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xc2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0}) 09:16:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105502, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0}) [ 1539.279909][T27593] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 1539.287412][T27595] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1539.294665][T27599] usb usb5: usbfs: process 27599 (syz-executor.5) did not claim interface 0 before use [ 1539.304762][T27601] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:16:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105512, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xd2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1539.335129][T27604] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1539.364672][T27609] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1539.381675][T27610] usb usb5: usbfs: process 27610 (syz-executor.4) did not claim interface 0 before use [ 1539.398048][T27610] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0}) 09:16:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x5}, 0x80000000, 0x6, &(0x7f00000000c0)="8abcd2572c2f331537337f0161572755675a85c5a3bdb65e8912caef853ede04da81a7ed82279196270d09375a38b5157c42d69c10cea5665326b5b9f83b14a2b3f21d78e2d5a94a9668f45599d952aad3d351518889d0d5a93002d58c4a976db63e555c1afd36e659967f914f176f3b174b0cb143c872fac9f5388d5deae5c91728c1b784415d1fadd68e230b5d00c65e99b68efcd763b9012957e66c2b6492b5124684f2a3516016c4c8d8bf9bd76df8fa038744e6d85bbb07c2", 0xbb, 0x8b10c04, 0x4, 0x8, 0x3, 0x2, &(0x7f0000000180)="cfbce350b413139d8ebf78e7dd688cc21ff5992c11bbda935a23185ba0f0bba830c909be546b8026dd5b469f4907a23aec71bdd7f5e2b59c93134cf593a4ddc1811075ad04f97feb3a2818a69c60f69ba899fb18303b5f6efbf9ad9b60eec464a386a2fd43ed6b8c6b533722ad4007cdabde8c0eada821c09ecf598bc623c718c1908110db17ded1e2a02d3ad92412337fb0400d14563113418da0d9cb2910e859f8ef871ff9e76480b63fef472a57c9d6a5fe74c2ea05e6084db9d5dd687ad3f91d6774ed891cf323fb21a680abfe4acd"}) 09:16:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xd6], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0}) 09:16:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1540.110228][T27621] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 1540.119886][T27616] usb usb5: usbfs: process 27616 (syz-executor.5) did not claim interface 0 before use [ 1540.124360][T27625] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1540.130953][T27616] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1540.148362][T27620] usb usb5: usbfs: process 27620 (syz-executor.4) did not claim interface 0 before use 09:16:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0}) 09:16:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185502, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x5}, 0x80000000, 0x6, &(0x7f00000000c0)="8abcd2572c2f331537337f0161572755675a85c5a3bdb65e8912caef853ede04da81a7ed82279196270d09375a38b5157c42d69c10cea5665326b5b9f83b14a2b3f21d78e2d5a94a9668f45599d952aad3d351518889d0d5a93002d58c4a976db63e555c1afd36e659967f914f176f3b174b0cb143c872fac9f5388d5deae5c91728c1b784415d1fadd68e230b5d00c65e99b68efcd763b9012957e66c2b6492b5124684f2a3516016c4c8d8bf9bd76df8fa038744e6d85bbb07c2", 0xbb, 0x8b10c04, 0x4, 0x8, 0x3, 0x2, &(0x7f0000000180)="cfbce350b413139d8ebf78e7dd688cc21ff5992c11bbda935a23185ba0f0bba830c909be546b8026dd5b469f4907a23aec71bdd7f5e2b59c93134cf593a4ddc1811075ad04f97feb3a2818a69c60f69ba899fb18303b5f6efbf9ad9b60eec464a386a2fd43ed6b8c6b533722ad4007cdabde8c0eada821c09ecf598bc623c718c1908110db17ded1e2a02d3ad92412337fb0400d14563113418da0d9cb2910e859f8ef871ff9e76480b63fef472a57c9d6a5fe74c2ea05e6084db9d5dd687ad3f91d6774ed891cf323fb21a680abfe4acd"}) 09:16:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0}) 09:16:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}) 09:16:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xd8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1540.159057][T27624] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1540.181433][T27629] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1540.213549][T27635] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1540.223246][T27638] usb usb5: usbfs: process 27638 (syz-executor.4) did not claim interface 0 before use [ 1540.239583][T27638] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1540.247011][T27639] usb usb5: usbfs: process 27639 (syz-executor.5) did not claim interface 0 before use 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xea], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0189436, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0}) 09:16:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x5}, 0x80000000, 0x6, &(0x7f00000000c0)="8abcd2572c2f331537337f0161572755675a85c5a3bdb65e8912caef853ede04da81a7ed82279196270d09375a38b5157c42d69c10cea5665326b5b9f83b14a2b3f21d78e2d5a94a9668f45599d952aad3d351518889d0d5a93002d58c4a976db63e555c1afd36e659967f914f176f3b174b0cb143c872fac9f5388d5deae5c91728c1b784415d1fadd68e230b5d00c65e99b68efcd763b9012957e66c2b6492b5124684f2a3516016c4c8d8bf9bd76df8fa038744e6d85bbb07c2", 0xbb, 0x8b10c04, 0x4, 0x8, 0x3, 0x2, &(0x7f0000000180)="cfbce350b413139d8ebf78e7dd688cc21ff5992c11bbda935a23185ba0f0bba830c909be546b8026dd5b469f4907a23aec71bdd7f5e2b59c93134cf593a4ddc1811075ad04f97feb3a2818a69c60f69ba899fb18303b5f6efbf9ad9b60eec464a386a2fd43ed6b8c6b533722ad4007cdabde8c0eada821c09ecf598bc623c718c1908110db17ded1e2a02d3ad92412337fb0400d14563113418da0d9cb2910e859f8ef871ff9e76480b63fef472a57c9d6a5fe74c2ea05e6084db9d5dd687ad3f91d6774ed891cf323fb21a680abfe4acd"}) 09:16:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xfa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x60, 0x13, 0x6, 0x0, 0x74, 0x20, &(0x7f00000000c0)="0f8b11a97e552b1a3c7071b7576cdd0d4c5ef6f34600f24336b67e228ad2f904360acfb9d9a80c213bacafbb28c8a5a76d4861c28c6243a070c9e926c1f1e41f05ae816af37cc597a3ad7dcd57dc52dc1925a0e5724e1fcdd509beac6d6082ed700a5bde9ec1c5619c4f7f5d008de97dc9c80c1f"}) 09:16:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0xc020660b, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x106], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x752e, 0x0, 0x0}) 09:16:08 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x60, 0x13, 0x6, 0x0, 0x74, 0x20, &(0x7f00000000c0)="0f8b11a97e552b1a3c7071b7576cdd0d4c5ef6f34600f24336b67e228ad2f904360acfb9d9a80c213bacafbb28c8a5a76d4861c28c6243a070c9e926c1f1e41f05ae816af37cc597a3ad7dcd57dc52dc1925a0e5724e1fcdd509beac6d6082ed700a5bde9ec1c5619c4f7f5d008de97dc9c80c1f"}) (rerun: 64) 09:16:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0}) [ 1540.954553][T27645] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1540.964698][T27649] usb usb5: usbfs: process 27649 (syz-executor.4) did not claim interface 0 before use [ 1540.974899][T27649] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1540.982834][T27652] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x112], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x60, 0x13, 0x6, 0x0, 0x74, 0x20, &(0x7f00000000c0)="0f8b11a97e552b1a3c7071b7576cdd0d4c5ef6f34600f24336b67e228ad2f904360acfb9d9a80c213bacafbb28c8a5a76d4861c28c6243a070c9e926c1f1e41f05ae816af37cc597a3ad7dcd57dc52dc1925a0e5724e1fcdd509beac6d6082ed700a5bde9ec1c5619c4f7f5d008de97dc9c80c1f"}) 09:16:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x0) 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x118], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x3, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x200c, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x11a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x31, "e804639c66360d7aee209299b8c0114d80596d", 0x401, 0xc}) 09:16:08 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x0) (async) 09:16:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x7530, 0x0, 0x0}) [ 1541.037150][T27662] usb usb5: usbfs: process 27662 (syz-executor.4) did not claim interface 0 before use [ 1541.061390][T27662] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1541.069608][T27668] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1541.078364][T27669] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0xa, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x0) (async) 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x11c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0}) 09:16:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x10, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000140)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x8) 09:16:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2301, 0x0, 0x0, 0x0, 0x0}) [ 1541.131567][T27685] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1541.140231][T27694] usb usb5: usbfs: process 27694 (syz-executor.4) did not claim interface 0 before use [ 1541.151629][T27694] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x140], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x38, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1541.184450][T27703] usb usb5: usbfs: process 27703 (syz-executor.4) did not claim interface 0 before use [ 1541.206958][T27703] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1541.215179][T27704] usb usb5: usbfs: process 27704 (syz-executor.5) did not claim interface 0 before use [ 1541.225089][T27707] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0}) 09:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x148], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000140)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x8) 09:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2303, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x4e, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045510, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x14c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x64, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1541.969851][T27718] usb usb5: usbfs: process 27718 (syz-executor.5) did not claim interface 0 before use [ 1541.971077][T27716] xt_check_match: 9 callbacks suppressed [ 1541.971093][T27716] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1541.981363][T27718] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1542.005365][T27721] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045510, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}) 09:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x14e], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000140)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x8) 09:16:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x550b, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1542.013103][T27722] usb usb5: usbfs: process 27722 (syz-executor.4) did not claim interface 0 before use [ 1542.034496][T27727] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1542.051185][T27733] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1542.058532][T27734] usb usb5: usbfs: process 27734 (syz-executor.4) did not claim interface 0 before use 09:16:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}) 09:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup(r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000001c0)={0xbe79, 0x5, [{0xe, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x11}, {0xe, 0x1}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x8004c0, 0xb0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0x0, 0xc}, {0xffe0, 0xfff2}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1542.077318][T27734] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1542.080834][T27740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1542.108475][T27736] usb usb5: usbfs: process 27736 (syz-executor.5) did not claim interface 0 before use 09:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x152], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x156], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1542.124546][T27736] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1542.131943][T27748] usb usb5: usbfs: process 27748 (syz-executor.2) did not claim interface 0 before use [ 1542.136218][T27751] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1542.143445][T27749] usb usb5: usbfs: process 27749 (syz-executor.3) did not claim interface 0 before use [ 1542.163273][T27743] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0}) 09:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x73, 0x101301) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8, 0x3}}, './file0\x00'}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x1110a1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000140)=0xc73f, 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x30000}, 0x18) shutdown(r3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_delroute={0x24, 0x19, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x7f, 0x0, 0x2, 0xff, 0x0, 0x2b00}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20400d1}, 0x40080) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x2}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (fail_nth: 1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x162], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x3}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1542.168175][T27754] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1542.190885][T27756] usb usb5: usbfs: process 27756 (syz-executor.4) did not claim interface 0 before use [ 1542.215816][T27756] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0}) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x4}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x73, 0x101301) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8, 0x3}}, './file0\x00'}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x1110a1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000140)=0xc73f, 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x30000}, 0x18) shutdown(r3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_delroute={0x24, 0x19, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x7f, 0x0, 0x2, 0xff, 0x0, 0x2b00}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20400d1}, 0x40080) syz_open_dev$usbfs(&(0x7f0000000180), 0x73, 0x101301) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8, 0x3}}, './file0\x00'}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x1110a1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000140)=0xc73f, 0x4) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x30000}, 0x18) (async) shutdown(r3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_delroute={0x24, 0x19, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x7f, 0x0, 0x2, 0xff, 0x0, 0x2b00}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20400d1}, 0x40080) (async) [ 1542.231571][T27763] usb usb5: usbfs: process 27763 (syz-executor.5) did not claim interface 0 before use [ 1542.243970][T27765] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1542.246663][T27767] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0}) [ 1542.291280][T27774] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1542.298507][T27777] usb usb5: usbfs: process 27777 (syz-executor.5) did not claim interface 0 before use [ 1542.311042][T27777] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1542.326061][T27773] usb usb5: usbfs: process 27773 (syz-executor.4) did not claim interface 0 before use 09:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x176], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x5}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x6}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0}) [ 1542.336840][T27780] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1542.346591][T27777] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1542.356579][T27787] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1542.396306][T27792] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1543.038833][T27769] FAULT_INJECTION: forcing a failure. [ 1543.038833][T27769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.051930][T27769] CPU: 1 PID: 27769 Comm: syz-executor.2 Not tainted 6.7.0-rc5-syzkaller #0 [ 1543.060776][T27769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1543.071003][T27769] Call Trace: [ 1543.074309][T27769] [ 1543.077270][T27769] dump_stack_lvl+0xda/0x130 [ 1543.081906][T27769] dump_stack+0x15/0x20 [ 1543.086083][T27769] should_fail_ex+0x21f/0x230 [ 1543.090758][T27769] should_fail+0xb/0x10 [ 1543.094997][T27769] should_fail_usercopy+0x1a/0x20 [ 1543.100031][T27769] _copy_to_user+0x1e/0x90 [ 1543.104503][T27769] simple_read_from_buffer+0xa0/0x110 [ 1543.109986][T27769] proc_fail_nth_read+0xfc/0x140 [ 1543.114908][T27769] ? proc_fault_inject_write+0x210/0x210 [ 1543.120583][T27769] vfs_read+0x1a4/0x590 [ 1543.124734][T27769] ? mutex_lock+0xd/0x30 [ 1543.129024][T27769] ksys_read+0xeb/0x1a0 [ 1543.133172][T27769] __x64_sys_read+0x42/0x50 [ 1543.137701][T27769] do_syscall_64+0x44/0x110 [ 1543.142196][T27769] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1543.148146][T27769] RIP: 0033:0x7fbc7b21184c [ 1543.152564][T27769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1543.172162][T27769] RSP: 002b:00007fbc7a5740c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1543.180774][T27769] RAX: ffffffffffffffda RBX: 00007fbc7b332050 RCX: 00007fbc7b21184c 09:16:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x7}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x73, 0x101301) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8, 0x3}}, './file0\x00'}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x1110a1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000140)=0xc73f, 0x4) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x30000}, 0x18) shutdown(r3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_delroute={0x24, 0x19, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x7f, 0x0, 0x2, 0xff, 0x0, 0x2b00}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20400d1}, 0x40080) 09:16:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x17c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0}) 09:16:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0}) 09:16:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) [ 1543.188730][T27769] RDX: 000000000000000f RSI: 00007fbc7a574130 RDI: 0000000000000005 [ 1543.196684][T27769] RBP: 00007fbc7a574120 R08: 0000000000000000 R09: 0000000000000000 [ 1543.204644][T27769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.212608][T27769] R13: 000000000000006e R14: 00007fbc7b332050 R15: 00007ffd559c6e08 [ 1543.220570][T27769] 09:16:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x8}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1aa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1543.241132][T27801] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1543.241487][T27803] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1543.248305][T27798] usb usb5: usbfs: process 27798 (syz-executor.5) did not claim interface 0 before use [ 1543.279353][T27798] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:10 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockname(r0, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}) 09:16:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x9}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1543.288392][T27797] usb usb5: usbfs: process 27797 (syz-executor.4) did not claim interface 0 before use [ 1543.318242][T27814] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1543.327704][T27812] usb usb5: usbfs: process 27812 (syz-executor.5) did not claim interface 0 before use 09:16:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xa}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x76f1, 0x0, 0x0, 0x0, 0x0}) [ 1543.338662][T27810] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1543.338832][T27812] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1543.379593][T27821] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0}) 09:16:11 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockname(r0, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xb}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1b8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}) 09:16:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:11 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockname(r0, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1544.123922][T27826] usb usb5: usbfs: process 27826 (syz-executor.5) did not claim interface 0 before use [ 1544.138786][T27826] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1544.149953][T27830] usb usb5: usbfs: process 27830 (syz-executor.4) did not claim interface 0 before use [ 1544.150735][T27829] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:16:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1ba], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xc}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa100, 0x0, 0x0, 0x0, 0x0}) 09:16:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}) 09:16:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x9}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0xf, 0x0, 0x3ff, 0x8f, 0x7f, &(0x7f00000000c0)="674044a6f1a96e8140cdfef34183cceafd18f4240dba4fd0fefecaa1921bf1bf3c70f915fd7b61e50a156d67080f7679f554e0ba01ff0dc7f72456e2dd07d8c6e53e4f7782f8f9c474445e00c08d3c7385f5d47b7e2064215e58bcf18614b9fe887d880f1b7e5d81f9e6d926e6097840588290838f84617397faba72f457ed1b77b4736400cc230f7c0aa4e0c04e9c"}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)={0x2638, 0xe, [{0x6, 0x1}, {0xc}, {0x1}, {0x7, 0x1}, {0xd, 0x1}, {0xf, 0x1}, {0x3}, {0x7, 0x1}, {0xc, 0x1}, {0xd, 0x1}, {0xc}, {0x2}, {}, {0xc, 0x1}]}) sync_file_range(r0, 0x5, 0x9, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x82, &(0x7f0000000200)="6a8a37141a6526566e589a656f58865462a7413cd82dbee8861af1a7767c9e2bcf8bd0c47d57cdb40b8ba9d9f036173c375225514eda62c0dce24da24fd1dde8c652c2a442a36ba609f325d2c4070e99a6c4833761e12a2dfc56757094619fd520", 0x61, 0x6a, 0xfff, 0x35, 0x6, 0xffffffe1, &(0x7f0000000280)="aaf159026abde013fcc340d193fa5c3d815e36b13c2cc2311519970f92725e315abb0d955a6b08e8005761782d78044a246bcf642ad10af1394a839f376108b4fc1fad4a9841b9369143a97064a8d0fe93e199bd4666a409ac81a81b9f3424ce27bf79789b134c0ca33805797099527d67db9a9d2d36c47439188d21f95ddb1f137e37f704c97d09fa26acb9eaf5a615f8797994321b6912b49c2a81a5b4f052813e963f90cca2ffc4cc5bbd424afab2ec62e971f619ea028438e258", [{0x0, 0x9, 0x2}, {0x4, 0x400, 0xffffffff}, {0x0, 0x5b4, 0x77}, {0x2, 0x9, 0x9}, {0x0, 0xd22, 0x3}, {0x80000001, 0xffffff80, 0x8d}, {0x7fffffff, 0xfffffff9, 0x4}, {0x2, 0x1, 0x2}, {0x101, 0x200, 0xda}, {0x7, 0xffff6b19, 0x86a4}, {0x81, 0x8, 0x490}, {0x7fff, 0x3, 0x7}, {0x2, 0xcb73, 0x5}, {0x9, 0xd5, 0x70d8bf8a}, {0x1, 0x0, 0x3ff}, {0x4, 0xffff, 0x7}, {0x3f2b, 0x3}, {0x4, 0x9, 0x2}, {0xfffffffb, 0x0, 0x7}, {0xfffffffd, 0x1, 0x2a}, {0x8, 0x5, 0x4}, {0x629, 0xc09}, {0x9, 0x401, 0x6}, {0x7, 0x3, 0x2}, {0x3, 0x0, 0x200}, {0x1f, 0x7f, 0x80}, {0x3, 0x3, 0x9}, {0x7ff, 0x200, 0x7}, {0x0, 0x1, 0xd678}, {0x8, 0x2, 0x2}, {0x2, 0x19, 0x4}, {0x9, 0x1af4, 0x2f0}, {0x6, 0xffff, 0x17}, {0x3, 0x80, 0xfd6a}, {0x9, 0x7, 0x37e}, {0x5, 0x7, 0x81}, {0x8, 0x5, 0x1}, {0xfffffff7, 0xf0b, 0xcc}, {0x1, 0x2, 0x81}, {0x3, 0x0, 0x7}, {0xafd, 0x1, 0x7ff}, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x1f}, {0x0, 0x10001}, {0xfffff801, 0x5, 0x40}, {0xf7, 0x3, 0x1c00000}, {0x4, 0x0, 0x2}, {0x9, 0x9, 0x10000}, {0x7b3f, 0x5, 0x4}, {0x8000, 0x8000, 0x80000001}, {0x2, 0xb9a0, 0x68cc}, {0x1000, 0x0, 0x2}, {0x0, 0x0, 0xc91a}]}) [ 1544.176251][T27830] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1544.186328][T27834] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1544.199167][T27836] usb usb5: usbfs: process 27836 (syz-executor.5) did not claim interface 0 before use 09:16:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xd}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1544.238537][T27843] usb usb5: usbfs: process 27843 (syz-executor.4) did not claim interface 0 before use [ 1544.261560][T27843] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1544.269137][T27851] vhci_hcd: invalid port number 255 [ 1544.274356][T27851] vhci_hcd: default hub control req: 800f v0000 i00ff l143 09:16:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1be], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xe}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xf176, 0x0, 0x0, 0x0, 0x0}) 09:16:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x9}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0xf, 0x0, 0x3ff, 0x8f, 0x7f, &(0x7f00000000c0)="674044a6f1a96e8140cdfef34183cceafd18f4240dba4fd0fefecaa1921bf1bf3c70f915fd7b61e50a156d67080f7679f554e0ba01ff0dc7f72456e2dd07d8c6e53e4f7782f8f9c474445e00c08d3c7385f5d47b7e2064215e58bcf18614b9fe887d880f1b7e5d81f9e6d926e6097840588290838f84617397faba72f457ed1b77b4736400cc230f7c0aa4e0c04e9c"}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)={0x2638, 0xe, [{0x6, 0x1}, {0xc}, {0x1}, {0x7, 0x1}, {0xd, 0x1}, {0xf, 0x1}, {0x3}, {0x7, 0x1}, {0xc, 0x1}, {0xd, 0x1}, {0xc}, {0x2}, {}, {0xc, 0x1}]}) (async) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)={0x2638, 0xe, [{0x6, 0x1}, {0xc}, {0x1}, {0x7, 0x1}, {0xd, 0x1}, {0xf, 0x1}, {0x3}, {0x7, 0x1}, {0xc, 0x1}, {0xd, 0x1}, {0xc}, {0x2}, {}, {0xc, 0x1}]}) sync_file_range(r0, 0x5, 0x9, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x82, &(0x7f0000000200)="6a8a37141a6526566e589a656f58865462a7413cd82dbee8861af1a7767c9e2bcf8bd0c47d57cdb40b8ba9d9f036173c375225514eda62c0dce24da24fd1dde8c652c2a442a36ba609f325d2c4070e99a6c4833761e12a2dfc56757094619fd520", 0x61, 0x6a, 0xfff, 0x35, 0x6, 0xffffffe1, &(0x7f0000000280)="aaf159026abde013fcc340d193fa5c3d815e36b13c2cc2311519970f92725e315abb0d955a6b08e8005761782d78044a246bcf642ad10af1394a839f376108b4fc1fad4a9841b9369143a97064a8d0fe93e199bd4666a409ac81a81b9f3424ce27bf79789b134c0ca33805797099527d67db9a9d2d36c47439188d21f95ddb1f137e37f704c97d09fa26acb9eaf5a615f8797994321b6912b49c2a81a5b4f052813e963f90cca2ffc4cc5bbd424afab2ec62e971f619ea028438e258", [{0x0, 0x9, 0x2}, {0x4, 0x400, 0xffffffff}, {0x0, 0x5b4, 0x77}, {0x2, 0x9, 0x9}, {0x0, 0xd22, 0x3}, {0x80000001, 0xffffff80, 0x8d}, {0x7fffffff, 0xfffffff9, 0x4}, {0x2, 0x1, 0x2}, {0x101, 0x200, 0xda}, {0x7, 0xffff6b19, 0x86a4}, {0x81, 0x8, 0x490}, {0x7fff, 0x3, 0x7}, {0x2, 0xcb73, 0x5}, {0x9, 0xd5, 0x70d8bf8a}, {0x1, 0x0, 0x3ff}, {0x4, 0xffff, 0x7}, {0x3f2b, 0x3}, {0x4, 0x9, 0x2}, {0xfffffffb, 0x0, 0x7}, {0xfffffffd, 0x1, 0x2a}, {0x8, 0x5, 0x4}, {0x629, 0xc09}, {0x9, 0x401, 0x6}, {0x7, 0x3, 0x2}, {0x3, 0x0, 0x200}, {0x1f, 0x7f, 0x80}, {0x3, 0x3, 0x9}, {0x7ff, 0x200, 0x7}, {0x0, 0x1, 0xd678}, {0x8, 0x2, 0x2}, {0x2, 0x19, 0x4}, {0x9, 0x1af4, 0x2f0}, {0x6, 0xffff, 0x17}, {0x3, 0x80, 0xfd6a}, {0x9, 0x7, 0x37e}, {0x5, 0x7, 0x81}, {0x8, 0x5, 0x1}, {0xfffffff7, 0xf0b, 0xcc}, {0x1, 0x2, 0x81}, {0x3, 0x0, 0x7}, {0xafd, 0x1, 0x7ff}, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x1f}, {0x0, 0x10001}, {0xfffff801, 0x5, 0x40}, {0xf7, 0x3, 0x1c00000}, {0x4, 0x0, 0x2}, {0x9, 0x9, 0x10000}, {0x7b3f, 0x5, 0x4}, {0x8000, 0x8000, 0x80000001}, {0x2, 0xb9a0, 0x68cc}, {0x1000, 0x0, 0x2}, {0x0, 0x0, 0xc91a}]}) [ 1544.283684][T27846] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1544.325805][T27856] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1544.338471][T27859] vhci_hcd: invalid port number 255 [ 1544.343698][T27859] vhci_hcd: default hub control req: 800f v0000 i00ff l143 09:16:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x9}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0xf, 0x0, 0x3ff, 0x8f, 0x7f, &(0x7f00000000c0)="674044a6f1a96e8140cdfef34183cceafd18f4240dba4fd0fefecaa1921bf1bf3c70f915fd7b61e50a156d67080f7679f554e0ba01ff0dc7f72456e2dd07d8c6e53e4f7782f8f9c474445e00c08d3c7385f5d47b7e2064215e58bcf18614b9fe887d880f1b7e5d81f9e6d926e6097840588290838f84617397faba72f457ed1b77b4736400cc230f7c0aa4e0c04e9c"}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)={0x2638, 0xe, [{0x6, 0x1}, {0xc}, {0x1}, {0x7, 0x1}, {0xd, 0x1}, {0xf, 0x1}, {0x3}, {0x7, 0x1}, {0xc, 0x1}, {0xd, 0x1}, {0xc}, {0x2}, {}, {0xc, 0x1}]}) sync_file_range(r0, 0x5, 0x9, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x82, &(0x7f0000000200)="6a8a37141a6526566e589a656f58865462a7413cd82dbee8861af1a7767c9e2bcf8bd0c47d57cdb40b8ba9d9f036173c375225514eda62c0dce24da24fd1dde8c652c2a442a36ba609f325d2c4070e99a6c4833761e12a2dfc56757094619fd520", 0x61, 0x6a, 0xfff, 0x35, 0x6, 0xffffffe1, &(0x7f0000000280)="aaf159026abde013fcc340d193fa5c3d815e36b13c2cc2311519970f92725e315abb0d955a6b08e8005761782d78044a246bcf642ad10af1394a839f376108b4fc1fad4a9841b9369143a97064a8d0fe93e199bd4666a409ac81a81b9f3424ce27bf79789b134c0ca33805797099527d67db9a9d2d36c47439188d21f95ddb1f137e37f704c97d09fa26acb9eaf5a615f8797994321b6912b49c2a81a5b4f052813e963f90cca2ffc4cc5bbd424afab2ec62e971f619ea028438e258", [{0x0, 0x9, 0x2}, {0x4, 0x400, 0xffffffff}, {0x0, 0x5b4, 0x77}, {0x2, 0x9, 0x9}, {0x0, 0xd22, 0x3}, {0x80000001, 0xffffff80, 0x8d}, {0x7fffffff, 0xfffffff9, 0x4}, {0x2, 0x1, 0x2}, {0x101, 0x200, 0xda}, {0x7, 0xffff6b19, 0x86a4}, {0x81, 0x8, 0x490}, {0x7fff, 0x3, 0x7}, {0x2, 0xcb73, 0x5}, {0x9, 0xd5, 0x70d8bf8a}, {0x1, 0x0, 0x3ff}, {0x4, 0xffff, 0x7}, {0x3f2b, 0x3}, {0x4, 0x9, 0x2}, {0xfffffffb, 0x0, 0x7}, {0xfffffffd, 0x1, 0x2a}, {0x8, 0x5, 0x4}, {0x629, 0xc09}, {0x9, 0x401, 0x6}, {0x7, 0x3, 0x2}, {0x3, 0x0, 0x200}, {0x1f, 0x7f, 0x80}, {0x3, 0x3, 0x9}, {0x7ff, 0x200, 0x7}, {0x0, 0x1, 0xd678}, {0x8, 0x2, 0x2}, {0x2, 0x19, 0x4}, {0x9, 0x1af4, 0x2f0}, {0x6, 0xffff, 0x17}, {0x3, 0x80, 0xfd6a}, {0x9, 0x7, 0x37e}, {0x5, 0x7, 0x81}, {0x8, 0x5, 0x1}, {0xfffffff7, 0xf0b, 0xcc}, {0x1, 0x2, 0x81}, {0x3, 0x0, 0x7}, {0xafd, 0x1, 0x7ff}, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x1f}, {0x0, 0x10001}, {0xfffff801, 0x5, 0x40}, {0xf7, 0x3, 0x1c00000}, {0x4, 0x0, 0x2}, {0x9, 0x9, 0x10000}, {0x7b3f, 0x5, 0x4}, {0x8000, 0x8000, 0x80000001}, {0x2, 0xb9a0, 0x68cc}, {0x1000, 0x0, 0x2}, {0x0, 0x0, 0xc91a}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x9}) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0xf, 0x0, 0x3ff, 0x8f, 0x7f, &(0x7f00000000c0)="674044a6f1a96e8140cdfef34183cceafd18f4240dba4fd0fefecaa1921bf1bf3c70f915fd7b61e50a156d67080f7679f554e0ba01ff0dc7f72456e2dd07d8c6e53e4f7782f8f9c474445e00c08d3c7385f5d47b7e2064215e58bcf18614b9fe887d880f1b7e5d81f9e6d926e6097840588290838f84617397faba72f457ed1b77b4736400cc230f7c0aa4e0c04e9c"}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)={0x2638, 0xe, [{0x6, 0x1}, {0xc}, {0x1}, {0x7, 0x1}, {0xd, 0x1}, {0xf, 0x1}, {0x3}, {0x7, 0x1}, {0xc, 0x1}, {0xd, 0x1}, {0xc}, {0x2}, {}, {0xc, 0x1}]}) (async) sync_file_range(r0, 0x5, 0x9, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_iso={0x0, {0xc, 0x1}, 0x2, 0x82, &(0x7f0000000200)="6a8a37141a6526566e589a656f58865462a7413cd82dbee8861af1a7767c9e2bcf8bd0c47d57cdb40b8ba9d9f036173c375225514eda62c0dce24da24fd1dde8c652c2a442a36ba609f325d2c4070e99a6c4833761e12a2dfc56757094619fd520", 0x61, 0x6a, 0xfff, 0x35, 0x6, 0xffffffe1, &(0x7f0000000280)="aaf159026abde013fcc340d193fa5c3d815e36b13c2cc2311519970f92725e315abb0d955a6b08e8005761782d78044a246bcf642ad10af1394a839f376108b4fc1fad4a9841b9369143a97064a8d0fe93e199bd4666a409ac81a81b9f3424ce27bf79789b134c0ca33805797099527d67db9a9d2d36c47439188d21f95ddb1f137e37f704c97d09fa26acb9eaf5a615f8797994321b6912b49c2a81a5b4f052813e963f90cca2ffc4cc5bbd424afab2ec62e971f619ea028438e258", [{0x0, 0x9, 0x2}, {0x4, 0x400, 0xffffffff}, {0x0, 0x5b4, 0x77}, {0x2, 0x9, 0x9}, {0x0, 0xd22, 0x3}, {0x80000001, 0xffffff80, 0x8d}, {0x7fffffff, 0xfffffff9, 0x4}, {0x2, 0x1, 0x2}, {0x101, 0x200, 0xda}, {0x7, 0xffff6b19, 0x86a4}, {0x81, 0x8, 0x490}, {0x7fff, 0x3, 0x7}, {0x2, 0xcb73, 0x5}, {0x9, 0xd5, 0x70d8bf8a}, {0x1, 0x0, 0x3ff}, {0x4, 0xffff, 0x7}, {0x3f2b, 0x3}, {0x4, 0x9, 0x2}, {0xfffffffb, 0x0, 0x7}, {0xfffffffd, 0x1, 0x2a}, {0x8, 0x5, 0x4}, {0x629, 0xc09}, {0x9, 0x401, 0x6}, {0x7, 0x3, 0x2}, {0x3, 0x0, 0x200}, {0x1f, 0x7f, 0x80}, {0x3, 0x3, 0x9}, {0x7ff, 0x200, 0x7}, {0x0, 0x1, 0xd678}, {0x8, 0x2, 0x2}, {0x2, 0x19, 0x4}, {0x9, 0x1af4, 0x2f0}, {0x6, 0xffff, 0x17}, {0x3, 0x80, 0xfd6a}, {0x9, 0x7, 0x37e}, {0x5, 0x7, 0x81}, {0x8, 0x5, 0x1}, {0xfffffff7, 0xf0b, 0xcc}, {0x1, 0x2, 0x81}, {0x3, 0x0, 0x7}, {0xafd, 0x1, 0x7ff}, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x1f}, {0x0, 0x10001}, {0xfffff801, 0x5, 0x40}, {0xf7, 0x3, 0x1c00000}, {0x4, 0x0, 0x2}, {0x9, 0x9, 0x10000}, {0x7b3f, 0x5, 0x4}, {0x8000, 0x8000, 0x80000001}, {0x2, 0xb9a0, 0x68cc}, {0x1000, 0x0, 0x2}, {0x0, 0x0, 0xc91a}]}) (async) 09:16:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0}) 09:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1c2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x10}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x7ffffffffffffffe) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1c4], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x11}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x82ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1d8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x12}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0}) [ 1544.990675][T27871] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1544.998140][T27869] usb usb5: usbfs: process 27869 (syz-executor.4) did not claim interface 0 before use [ 1545.015948][T27869] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1545.023045][T27870] vhci_hcd: invalid port number 255 [ 1545.028306][T27870] vhci_hcd: default hub control req: 800f v0000 i00ff l143 09:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1e0], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x25}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x8}, {0xfff1, 0xe}, {0xf, 0xfff1}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c090) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa0ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0}) [ 1545.063021][T27883] vhci_hcd: invalid port number 255 [ 1545.068366][T27883] vhci_hcd: default hub control req: 800f v0000 i00ff l143 [ 1545.075597][T27884] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1545.082903][T27886] usb usb5: usbfs: process 27886 (syz-executor.4) did not claim interface 0 before use [ 1545.096309][T27886] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1545.141650][T27896] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap101 [ 1545.161868][T27900] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1545.169032][T27896] usb usb5: usbfs: process 27896 (syz-executor.5) did not claim interface 0 before use [ 1545.179194][T27896] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1545.186699][T27901] usb usb5: usbfs: process 27901 (syz-executor.4) did not claim interface 0 before use [ 1545.203211][T27901] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1545.283658][ C1] ================================================================== [ 1545.291736][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 1545.298925][ C1] [ 1545.301230][ C1] read-write to 0xffff8881000670a8 of 8 bytes by interrupt on cpu 0: [ 1545.309273][ C1] wq_worker_tick+0x66/0x3c0 [ 1545.313869][ C1] scheduler_tick+0x13e/0x1d0 [ 1545.318536][ C1] update_process_times+0xf5/0x110 [ 1545.323639][ C1] tick_nohz_highres_handler+0x244/0x2c0 [ 1545.329277][ C1] __hrtimer_run_queues+0x217/0x700 [ 1545.334460][ C1] hrtimer_interrupt+0x20d/0x7b0 [ 1545.339390][ C1] __sysvec_apic_timer_interrupt+0x52/0x190 [ 1545.345267][ C1] sysvec_apic_timer_interrupt+0x68/0x80 [ 1545.350883][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1545.356849][ C1] _raw_spin_unlock_irq+0x2f/0x40 [ 1545.361867][ C1] process_scheduled_works+0x59c/0xa30 [ 1545.367312][ C1] worker_thread+0x525/0x730 [ 1545.371887][ C1] kthread+0x1d7/0x210 [ 1545.375941][ C1] ret_from_fork+0x48/0x60 [ 1545.380357][ C1] ret_from_fork_asm+0x11/0x20 [ 1545.385151][ C1] [ 1545.387460][ C1] read-write to 0xffff8881000670a8 of 8 bytes by interrupt on cpu 1: [ 1545.395505][ C1] wq_worker_tick+0x66/0x3c0 [ 1545.400082][ C1] scheduler_tick+0x13e/0x1d0 [ 1545.404753][ C1] update_process_times+0xf5/0x110 [ 1545.409865][ C1] tick_nohz_highres_handler+0x244/0x2c0 [ 1545.415514][ C1] __hrtimer_run_queues+0x217/0x700 [ 1545.420695][ C1] hrtimer_interrupt+0x20d/0x7b0 [ 1545.425643][ C1] __sysvec_apic_timer_interrupt+0x52/0x190 [ 1545.431517][ C1] sysvec_apic_timer_interrupt+0x68/0x80 [ 1545.437133][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1545.443097][ C1] queue_work_on+0xbe/0xf0 [ 1545.447503][ C1] tty_insert_flip_string_and_push_buffer+0x1d2/0x200 [ 1545.454249][ C1] pty_write+0x7e/0xa0 [ 1545.458312][ C1] tty_put_char+0x83/0xb0 [ 1545.462640][ C1] __process_echoes+0x3a3/0x6a0 [ 1545.467479][ C1] n_tty_receive_char+0x5fe/0x670 [ 1545.472524][ C1] n_tty_receive_buf_standard+0x4bd/0x2e20 [ 1545.478318][ C1] n_tty_receive_buf_common+0x7e5/0xbc0 [ 1545.483864][ C1] n_tty_receive_buf2+0x33/0x40 [ 1545.488847][ C1] tty_ldisc_receive_buf+0x60/0xe0 [ 1545.493950][ C1] tty_port_default_receive_buf+0x59/0x90 [ 1545.499655][ C1] flush_to_ldisc+0x1ca/0x400 [ 1545.504324][ C1] process_scheduled_works+0x5b8/0xa30 [ 1545.509787][ C1] worker_thread+0x525/0x730 [ 1545.514363][ C1] kthread+0x1d7/0x210 [ 1545.518449][ C1] ret_from_fork+0x48/0x60 [ 1545.522854][ C1] ret_from_fork_asm+0x11/0x20 [ 1545.527604][ C1] 09:16:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0xee00, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x48}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1ee], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa3ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x8}, {0xfff1, 0xe}, {0xf, 0xfff1}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c090) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0}) [ 1545.529912][ C1] value changed: 0x0000000001808580 -> 0x000000000180ac90 [ 1545.537017][ C1] [ 1545.539327][ C1] Reported by Kernel Concurrency Sanitizer on: [ 1545.545459][ C1] CPU: 1 PID: 16816 Comm: kworker/u4:25 Not tainted 6.7.0-rc5-syzkaller #0 [ 1545.554118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 1545.564167][ C1] Workqueue: events_unbound flush_to_ldisc [ 1545.569979][ C1] ================================================================== 09:16:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x4c}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x1f0], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x202], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1545.611842][T27905] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1545.627154][T27914] usb usb5: usbfs: process 27914 (syz-executor.5) did not claim interface 0 before use [ 1545.644040][T27912] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap102 [ 1545.654137][T27914] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x60}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:12 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 64) r3 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x8}, {0xfff1, 0xe}, {0xf, 0xfff1}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c090) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1545.661728][T27918] usb usb5: usbfs: process 27918 (syz-executor.4) did not claim interface 0 before use [ 1545.700564][T27928] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1545.708282][T27925] usb usb5: usbfs: process 27925 (syz-executor.5) did not claim interface 0 before use [ 1545.718200][T27925] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0xee00, &(0x7f0000000100)) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x21a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0}) 09:16:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1020000, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x38, 0x69, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x4040) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc1, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x68}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x6c}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x38, 0x69, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x4040) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc1, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x220], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x38, 0x69, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x4040) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xc1, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0}) [ 1546.460510][T27935] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1546.478978][T27942] usb usb5: usbfs: process 27942 (syz-executor.4) did not claim interface 0 before use [ 1546.501002][T27942] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x228], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0x0}) 09:16:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1230000, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x74}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0xee00, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x22c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1546.547724][T27958] usb usb5: usbfs: process 27958 (syz-executor.4) did not claim interface 0 before use [ 1546.557834][T27958] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1546.565449][T27956] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x232], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x7a}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x234], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0}) 09:16:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x236], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1546.607316][T27965] usb usb5: usbfs: process 27965 (syz-executor.4) did not claim interface 0 before use [ 1546.620467][T27965] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1546.627998][T27968] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x238], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1546.676057][T27984] usb usb5: usbfs: process 27984 (syz-executor.4) did not claim interface 0 before use [ 1546.695416][T27984] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1546.702787][T27985] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1546.710188][T27989] usb usb5: usbfs: process 27989 (syz-executor.3) did not claim interface 0 before use 09:16:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x23a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_iso={0x0, {0x5, 0x1}, 0x40, 0x81, &(0x7f00000000c0)="fec76d5f258ca9d093a0a4ee983fece1fa76a03342a2923e61ad7c9afc238c0bb9d0a4fc1aad2ddb7ef87d0f78d9a8b47946d362fa21835599325cacbe0ac5d011c7e5dd0cade80ea804cb2dc970d19206453a2f644a3b36dcc490944a8eb38bb434d91f8f42b4729a6f6922cbbdad8e415d0fd521bd997922b92dc9b88564204074c98817191ae0b0bb5a6ac6600f9c4882cd12b07115b7f4ae83f520b1410c7ab24c85a7f98a1706c42666b7a6", 0xae, 0x4, 0xa4, 0x59, 0x7fffffff, 0x6, &(0x7f0000000180)="70419ee68b63192b35adf167b7a21794a1e0cc84b60c9ae229418e4673246b020d8dff8b695d3d0855a44a26ccf2227548883b6739d07b2cc2fac3bf6918401d4d897b8b182d6c6be66c3d261cb9c6734565b45032200423dc8982ab0713af926966375b22fbfbb1cc1da8706463fdbab09c5fef6b", [{0x6, 0x7f, 0x4}, {0x2b4c, 0x6a5, 0x7fff}, {0x24dc, 0x1f, 0x1}, {0x0, 0x7, 0x4b6}, {0x8, 0xfffff2e0, 0x4}, {0x8001, 0x3, 0x400}, {0x0, 0x4, 0x16}, {0x1, 0x7, 0x5}, {0x5, 0x3, 0x20}, {0x9, 0x31bc}, {0xdf27, 0x8, 0x8}, {0x0, 0x800, 0x9}, {0x1, 0xfffffc3c, 0x88}, {0x3, 0x9, 0x6}, {0x0, 0xfffffff7, 0x7fffffff}, {0x80000001, 0xffff61db, 0x3}, {0xc5bb, 0x7fffffff, 0x6}, {0x3ff, 0xfffffffd, 0x2}, {0x81, 0x80000000, 0x81}, {0xfa9d, 0x1000, 0x101}, {0x480, 0x6, 0x5b9}, {0x101, 0x5}, {0x9, 0x5, 0x9}, {0x2, 0x5, 0x8000}, {0x2, 0x1, 0x7ff}, {0x10000, 0x800, 0x2}, {0x2, 0x40, 0x79}, {0x40, 0x6, 0x3f}, {0x3, 0x5, 0x7}, {0x9, 0x8000, 0x4}, {0xdc, 0x14}, {0x7, 0xfffffff9, 0x3}, {0x0, 0x10001, 0x86c0}, {0x10001, 0x8, 0xcc14}, {0x1, 0x80000000, 0x1}, {0x9, 0x3, 0x9}, {0x1000, 0xfffffff8, 0xcab1}, {0x8, 0x3, 0x9}, {0x81, 0x97b9, 0xfffffff9}, {0x80000000, 0x0, 0x8}, {0x3, 0x4, 0xff}, {0x1, 0x9, 0x80000000}, {0x0, 0xfffffff9, 0x4}, {0xf472, 0x7fffffff}, {0x695, 0x1400, 0x8}, {0x8c3d, 0x4, 0xa48}, {0x100, 0x0, 0x20}, {0xffff8000, 0x7, 0x80000000}, {0x40, 0x9, 0x1}, {0x1, 0x0, 0x1f}, {0x4, 0x9, 0x2}, {0x7, 0x43, 0x5}, {0x2, 0x2, 0x6}, {0x8, 0x6, 0x4}, {0x0, 0x0, 0x6}, {0xdf, 0x7, 0x6}, {0x3, 0x8, 0xf8d3}, {0x0, 0x9, 0x80}, {0x7, 0xf8, 0x10001}, {0x9, 0x0, 0x6}, {0x0, 0x3, 0x31a}, {0x1, 0x2, 0x80000000}, {0xb9, 0x121, 0x40}, {0x401, 0x2, 0x102000}, {0x7, 0x2, 0x800}, {0x9, 0x400, 0x8}, {0x800, 0x1000}, {0xfffffffd, 0x92, 0x2}, {0xe0c5, 0x1, 0xd3}, {0x5, 0x8, 0x5}, {0x6, 0xfad, 0x100}, {0x13, 0x2, 0x33}, {0x8, 0x3, 0x6}, {0x5, 0x5, 0x6}, {0x7, 0x0, 0x3f}, {0x8, 0x35e5, 0x3fa8}, {0xfffffffb, 0x1800000, 0x80000001}, {0xdbf1, 0x2605, 0x40}, {0x3, 0x8, 0x7}, {0x1, 0x7, 0xffff}, {0xd886, 0x9, 0x8}, {0x0, 0x5, 0x8}, {0x7, 0x0, 0x4}, {0x3ff, 0x7f, 0x407a}, {0x63f, 0x1000000}, {0x4, 0x800, 0xfffffffb}, {0x3, 0x6b0, 0xfff}, {0xf01, 0x45c, 0x1f}, {0x80000001, 0x8, 0x9}]}) 09:16:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}) 09:16:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0}) 09:16:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x0, 0xef, 0x5, 0x2, 0x3, 0x3, 0x6, 0xde, 0x40, 0x34, 0x3, 0x2, 0x38, 0x1, 0x80, 0x0, 0x1}, [{0x2, 0x2, 0x7f, 0xfffffffffffff87d, 0x5, 0x7, 0x3f, 0x8}, {0x3, 0x160e, 0xffffffffffffffff, 0x5, 0x100000000, 0x9e16, 0x9, 0x5}], "ee52de7531dfa3bb1e64f91af307aab32de32db224f6f933b91fc8570e75d34d4fc6e6f0636e30a10222c24921b0e0ed24aa8ab1413b30610af20d4f8a1f3e86473301e415b2dda93f74942f618734861cbe95654a1ac59039034c60fdd112b35be19e75d6cfd2e231d363ebfe0857f6facc73fbf493a6691732161b585dd7a50ced8b1de497d47e62d7795e00a18e799014188f440bc82ea18f5b57896672f5ae10f2e222f72d06326141625d28c87e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x760) r1 = syz_open_pts(r0, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000008c010000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3, @ANYBLOB="e58f48bf21149b68c80765a89e31e917815345b4f5a618756920b2b9bdde7c10052c93d2e4ed3e2143ab5730d6e3e31480ab223dae00a2874a81dd466bc55282b5fd6edb81fdcdc0f214dc18b1895e9abad3f6b0040f2692e83d05421df5b08865c5280328d699871ad51589bae65fe004e696abc7d96188bb8c1c72c9a99dd77f87daeceff9aee90563bb8a8547e1c7e27d8b957ab0db64c11e9f2b0224289c63225647"], 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000a00)={&(0x7f0000000980)={0x2, 0x0, 0x3f25148f, {r5, r6/1000+60000}, {0x0, 0x2710}, {0x4}, 0x1, @canfd={{}, 0x5, 0x3, 0x0, 0x0, "c942cb6aa39270b6ff9fd3b48e74904e941357ca753db3fd14038872b172ad7a1f58953d9026ea944f3f4d786c27e43d29538e3b6354aaf910e8769283220105"}}, 0x80}, 0x1, 0x0, 0x0, 0x400004c}, 0x8844) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) sendmsg$nl_route(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@ipv6_newnexthop={0x24, 0x68, 0x20, 0x70bd2d, 0x9, {0xa, 0x0, 0x4, 0x0, 0x9}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 09:16:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_iso={0x0, {0x5, 0x1}, 0x40, 0x81, &(0x7f00000000c0)="fec76d5f258ca9d093a0a4ee983fece1fa76a03342a2923e61ad7c9afc238c0bb9d0a4fc1aad2ddb7ef87d0f78d9a8b47946d362fa21835599325cacbe0ac5d011c7e5dd0cade80ea804cb2dc970d19206453a2f644a3b36dcc490944a8eb38bb434d91f8f42b4729a6f6922cbbdad8e415d0fd521bd997922b92dc9b88564204074c98817191ae0b0bb5a6ac6600f9c4882cd12b07115b7f4ae83f520b1410c7ab24c85a7f98a1706c42666b7a6", 0xae, 0x4, 0xa4, 0x59, 0x7fffffff, 0x6, &(0x7f0000000180)="70419ee68b63192b35adf167b7a21794a1e0cc84b60c9ae229418e4673246b020d8dff8b695d3d0855a44a26ccf2227548883b6739d07b2cc2fac3bf6918401d4d897b8b182d6c6be66c3d261cb9c6734565b45032200423dc8982ab0713af926966375b22fbfbb1cc1da8706463fdbab09c5fef6b", [{0x6, 0x7f, 0x4}, {0x2b4c, 0x6a5, 0x7fff}, {0x24dc, 0x1f, 0x1}, {0x0, 0x7, 0x4b6}, {0x8, 0xfffff2e0, 0x4}, {0x8001, 0x3, 0x400}, {0x0, 0x4, 0x16}, {0x1, 0x7, 0x5}, {0x5, 0x3, 0x20}, {0x9, 0x31bc}, {0xdf27, 0x8, 0x8}, {0x0, 0x800, 0x9}, {0x1, 0xfffffc3c, 0x88}, {0x3, 0x9, 0x6}, {0x0, 0xfffffff7, 0x7fffffff}, {0x80000001, 0xffff61db, 0x3}, {0xc5bb, 0x7fffffff, 0x6}, {0x3ff, 0xfffffffd, 0x2}, {0x81, 0x80000000, 0x81}, {0xfa9d, 0x1000, 0x101}, {0x480, 0x6, 0x5b9}, {0x101, 0x5}, {0x9, 0x5, 0x9}, {0x2, 0x5, 0x8000}, {0x2, 0x1, 0x7ff}, {0x10000, 0x800, 0x2}, {0x2, 0x40, 0x79}, {0x40, 0x6, 0x3f}, {0x3, 0x5, 0x7}, {0x9, 0x8000, 0x4}, {0xdc, 0x14}, {0x7, 0xfffffff9, 0x3}, {0x0, 0x10001, 0x86c0}, {0x10001, 0x8, 0xcc14}, {0x1, 0x80000000, 0x1}, {0x9, 0x3, 0x9}, {0x1000, 0xfffffff8, 0xcab1}, {0x8, 0x3, 0x9}, {0x81, 0x97b9, 0xfffffff9}, {0x80000000, 0x0, 0x8}, {0x3, 0x4, 0xff}, {0x1, 0x9, 0x80000000}, {0x0, 0xfffffff9, 0x4}, {0xf472, 0x7fffffff}, {0x695, 0x1400, 0x8}, {0x8c3d, 0x4, 0xa48}, {0x100, 0x0, 0x20}, {0xffff8000, 0x7, 0x80000000}, {0x40, 0x9, 0x1}, {0x1, 0x0, 0x1f}, {0x4, 0x9, 0x2}, {0x7, 0x43, 0x5}, {0x2, 0x2, 0x6}, {0x8, 0x6, 0x4}, {0x0, 0x0, 0x6}, {0xdf, 0x7, 0x6}, {0x3, 0x8, 0xf8d3}, {0x0, 0x9, 0x80}, {0x7, 0xf8, 0x10001}, {0x9, 0x0, 0x6}, {0x0, 0x3, 0x31a}, {0x1, 0x2, 0x80000000}, {0xb9, 0x121, 0x40}, {0x401, 0x2, 0x102000}, {0x7, 0x2, 0x800}, {0x9, 0x400, 0x8}, {0x800, 0x1000}, {0xfffffffd, 0x92, 0x2}, {0xe0c5, 0x1, 0xd3}, {0x5, 0x8, 0x5}, {0x6, 0xfad, 0x100}, {0x13, 0x2, 0x33}, {0x8, 0x3, 0x6}, {0x5, 0x5, 0x6}, {0x7, 0x0, 0x3f}, {0x8, 0x35e5, 0x3fa8}, {0xfffffffb, 0x1800000, 0x80000001}, {0xdbf1, 0x2605, 0x40}, {0x3, 0x8, 0x7}, {0x1, 0x7, 0xffff}, {0xd886, 0x9, 0x8}, {0x0, 0x5, 0x8}, {0x7, 0x0, 0x4}, {0x3ff, 0x7f, 0x407a}, {0x63f, 0x1000000}, {0x4, 0x800, 0xfffffffb}, {0x3, 0x6b0, 0xfff}, {0xf01, 0x45c, 0x1f}, {0x80000001, 0x8, 0x9}]}) 09:16:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x3020000, 0x0, 0x0, 0x0, 0x0}) [ 1547.517850][T27999] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1547.525344][T28004] usb usb5: usbfs: process 28004 (syz-executor.3) did not claim interface 0 before use [ 1547.535995][T28003] usb usb5: usbfs: process 28003 (syz-executor.4) did not claim interface 0 before use [ 1547.552755][T27998] xt_check_match: 16 callbacks suppressed 09:16:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0}) 09:16:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x24e], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_iso={0x0, {0x5, 0x1}, 0x40, 0x81, &(0x7f00000000c0)="fec76d5f258ca9d093a0a4ee983fece1fa76a03342a2923e61ad7c9afc238c0bb9d0a4fc1aad2ddb7ef87d0f78d9a8b47946d362fa21835599325cacbe0ac5d011c7e5dd0cade80ea804cb2dc970d19206453a2f644a3b36dcc490944a8eb38bb434d91f8f42b4729a6f6922cbbdad8e415d0fd521bd997922b92dc9b88564204074c98817191ae0b0bb5a6ac6600f9c4882cd12b07115b7f4ae83f520b1410c7ab24c85a7f98a1706c42666b7a6", 0xae, 0x4, 0xa4, 0x59, 0x7fffffff, 0x6, &(0x7f0000000180)="70419ee68b63192b35adf167b7a21794a1e0cc84b60c9ae229418e4673246b020d8dff8b695d3d0855a44a26ccf2227548883b6739d07b2cc2fac3bf6918401d4d897b8b182d6c6be66c3d261cb9c6734565b45032200423dc8982ab0713af926966375b22fbfbb1cc1da8706463fdbab09c5fef6b", [{0x6, 0x7f, 0x4}, {0x2b4c, 0x6a5, 0x7fff}, {0x24dc, 0x1f, 0x1}, {0x0, 0x7, 0x4b6}, {0x8, 0xfffff2e0, 0x4}, {0x8001, 0x3, 0x400}, {0x0, 0x4, 0x16}, {0x1, 0x7, 0x5}, {0x5, 0x3, 0x20}, {0x9, 0x31bc}, {0xdf27, 0x8, 0x8}, {0x0, 0x800, 0x9}, {0x1, 0xfffffc3c, 0x88}, {0x3, 0x9, 0x6}, {0x0, 0xfffffff7, 0x7fffffff}, {0x80000001, 0xffff61db, 0x3}, {0xc5bb, 0x7fffffff, 0x6}, {0x3ff, 0xfffffffd, 0x2}, {0x81, 0x80000000, 0x81}, {0xfa9d, 0x1000, 0x101}, {0x480, 0x6, 0x5b9}, {0x101, 0x5}, {0x9, 0x5, 0x9}, {0x2, 0x5, 0x8000}, {0x2, 0x1, 0x7ff}, {0x10000, 0x800, 0x2}, {0x2, 0x40, 0x79}, {0x40, 0x6, 0x3f}, {0x3, 0x5, 0x7}, {0x9, 0x8000, 0x4}, {0xdc, 0x14}, {0x7, 0xfffffff9, 0x3}, {0x0, 0x10001, 0x86c0}, {0x10001, 0x8, 0xcc14}, {0x1, 0x80000000, 0x1}, {0x9, 0x3, 0x9}, {0x1000, 0xfffffff8, 0xcab1}, {0x8, 0x3, 0x9}, {0x81, 0x97b9, 0xfffffff9}, {0x80000000, 0x0, 0x8}, {0x3, 0x4, 0xff}, {0x1, 0x9, 0x80000000}, {0x0, 0xfffffff9, 0x4}, {0xf472, 0x7fffffff}, {0x695, 0x1400, 0x8}, {0x8c3d, 0x4, 0xa48}, {0x100, 0x0, 0x20}, {0xffff8000, 0x7, 0x80000000}, {0x40, 0x9, 0x1}, {0x1, 0x0, 0x1f}, {0x4, 0x9, 0x2}, {0x7, 0x43, 0x5}, {0x2, 0x2, 0x6}, {0x8, 0x6, 0x4}, {0x0, 0x0, 0x6}, {0xdf, 0x7, 0x6}, {0x3, 0x8, 0xf8d3}, {0x0, 0x9, 0x80}, {0x7, 0xf8, 0x10001}, {0x9, 0x0, 0x6}, {0x0, 0x3, 0x31a}, {0x1, 0x2, 0x80000000}, {0xb9, 0x121, 0x40}, {0x401, 0x2, 0x102000}, {0x7, 0x2, 0x800}, {0x9, 0x400, 0x8}, {0x800, 0x1000}, {0xfffffffd, 0x92, 0x2}, {0xe0c5, 0x1, 0xd3}, {0x5, 0x8, 0x5}, {0x6, 0xfad, 0x100}, {0x13, 0x2, 0x33}, {0x8, 0x3, 0x6}, {0x5, 0x5, 0x6}, {0x7, 0x0, 0x3f}, {0x8, 0x35e5, 0x3fa8}, {0xfffffffb, 0x1800000, 0x80000001}, {0xdbf1, 0x2605, 0x40}, {0x3, 0x8, 0x7}, {0x1, 0x7, 0xffff}, {0xd886, 0x9, 0x8}, {0x0, 0x5, 0x8}, {0x7, 0x0, 0x4}, {0x3ff, 0x7f, 0x407a}, {0x63f, 0x1000000}, {0x4, 0x800, 0xfffffffb}, {0x3, 0x6b0, 0xfff}, {0xf01, 0x45c, 0x1f}, {0x80000001, 0x8, 0x9}]}) 09:16:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x3200000, 0x0, 0x0, 0x0, 0x0}) [ 1547.552774][T27998] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1547.563363][T28003] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1547.579287][T28010] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1547.603888][T28015] usb usb5: usbfs: process 28015 (syz-executor.4) did not claim interface 0 before use 09:16:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x0, 0x3, 0x8}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x266], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1547.613894][T28013] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1547.635995][T28015] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1547.646681][T28021] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap102 [ 1547.648483][T28022] usb usb5: usbfs: process 28022 (syz-executor.3) did not claim interface 0 before use 09:16:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x3, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x3230000, 0x0, 0x0, 0x0, 0x0}) [ 1547.669220][T28018] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1547.672775][T28026] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1547.687002][T28025] usb usb5: usbfs: process 28025 (syz-executor.5) did not claim interface 0 before use [ 1547.698348][T28025] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1547.715109][T28029] usb usb5: usbfs: process 28029 (syz-executor.3) did not claim interface 0 before use [ 1547.725084][T28031] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x0, 0xef, 0x5, 0x2, 0x3, 0x3, 0x6, 0xde, 0x40, 0x34, 0x3, 0x2, 0x38, 0x1, 0x80, 0x0, 0x1}, [{0x2, 0x2, 0x7f, 0xfffffffffffff87d, 0x5, 0x7, 0x3f, 0x8}, {0x3, 0x160e, 0xffffffffffffffff, 0x5, 0x100000000, 0x9e16, 0x9, 0x5}], "ee52de7531dfa3bb1e64f91af307aab32de32db224f6f933b91fc8570e75d34d4fc6e6f0636e30a10222c24921b0e0ed24aa8ab1413b30610af20d4f8a1f3e86473301e415b2dda93f74942f618734861cbe95654a1ac59039034c60fdd112b35be19e75d6cfd2e231d363ebfe0857f6facc73fbf493a6691732161b585dd7a50ced8b1de497d47e62d7795e00a18e799014188f440bc82ea18f5b57896672f5ae10f2e222f72d06326141625d28c87e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x760) (async) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x0, 0xef, 0x5, 0x2, 0x3, 0x3, 0x6, 0xde, 0x40, 0x34, 0x3, 0x2, 0x38, 0x1, 0x80, 0x0, 0x1}, [{0x2, 0x2, 0x7f, 0xfffffffffffff87d, 0x5, 0x7, 0x3f, 0x8}, {0x3, 0x160e, 0xffffffffffffffff, 0x5, 0x100000000, 0x9e16, 0x9, 0x5}], "ee52de7531dfa3bb1e64f91af307aab32de32db224f6f933b91fc8570e75d34d4fc6e6f0636e30a10222c24921b0e0ed24aa8ab1413b30610af20d4f8a1f3e86473301e415b2dda93f74942f618734861cbe95654a1ac59039034c60fdd112b35be19e75d6cfd2e231d363ebfe0857f6facc73fbf493a6691732161b585dd7a50ced8b1de497d47e62d7795e00a18e799014188f440bc82ea18f5b57896672f5ae10f2e222f72d06326141625d28c87e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x760) syz_open_pts(r0, 0x0) (async) r1 = syz_open_pts(r0, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000008c010000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3, @ANYBLOB="e58f48bf21149b68c80765a89e31e917815345b4f5a618756920b2b9bdde7c10052c93d2e4ed3e2143ab5730d6e3e31480ab223dae00a2874a81dd466bc55282b5fd6edb81fdcdc0f214dc18b1895e9abad3f6b0040f2692e83d05421df5b08865c5280328d699871ad51589bae65fe004e696abc7d96188bb8c1c72c9a99dd77f87daeceff9aee90563bb8a8547e1c7e27d8b957ab0db64c11e9f2b0224289c63225647"], 0x40}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000008c010000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3, @ANYBLOB="e58f48bf21149b68c80765a89e31e917815345b4f5a618756920b2b9bdde7c10052c93d2e4ed3e2143ab5730d6e3e31480ab223dae00a2874a81dd466bc55282b5fd6edb81fdcdc0f214dc18b1895e9abad3f6b0040f2692e83d05421df5b08865c5280328d699871ad51589bae65fe004e696abc7d96188bb8c1c72c9a99dd77f87daeceff9aee90563bb8a8547e1c7e27d8b957ab0db64c11e9f2b0224289c63225647"], 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000a00)={&(0x7f0000000980)={0x2, 0x0, 0x3f25148f, {r5, r6/1000+60000}, {0x0, 0x2710}, {0x4}, 0x1, @canfd={{}, 0x5, 0x3, 0x0, 0x0, "c942cb6aa39270b6ff9fd3b48e74904e941357ca753db3fd14038872b172ad7a1f58953d9026ea944f3f4d786c27e43d29538e3b6354aaf910e8769283220105"}}, 0x80}, 0x1, 0x0, 0x0, 0x400004c}, 0x8844) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) sendmsg$nl_route(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@ipv6_newnexthop={0x24, 0x68, 0x20, 0x70bd2d, 0x9, {0xa, 0x0, 0x4, 0x0, 0x9}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 09:16:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x25000000, 0x0, 0x0}) 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x27e], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x0, 0x3, 0x8}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x282], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x2e750000, 0x0, 0x0}) [ 1548.383423][T28033] usb usb5: usbfs: process 28033 (syz-executor.4) did not claim interface 0 before use [ 1548.393386][T28042] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1548.403876][T28033] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1548.411397][T28036] usb usb5: usbfs: process 28036 (syz-executor.3) did not claim interface 0 before use [ 1548.421540][T28039] usb usb5: usbfs: process 28039 (syz-executor.5) did not claim interface 0 before use 09:16:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x5, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x286], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x0, 0x3, 0x8}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0}) [ 1548.434043][T28046] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1548.446405][T28039] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1548.454656][T28043] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1548.461796][T28047] usb usb5: usbfs: process 28047 (syz-executor.4) did not claim interface 0 before use 09:16:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x0, 0xef, 0x5, 0x2, 0x3, 0x3, 0x6, 0xde, 0x40, 0x34, 0x3, 0x2, 0x38, 0x1, 0x80, 0x0, 0x1}, [{0x2, 0x2, 0x7f, 0xfffffffffffff87d, 0x5, 0x7, 0x3f, 0x8}, {0x3, 0x160e, 0xffffffffffffffff, 0x5, 0x100000000, 0x9e16, 0x9, 0x5}], "ee52de7531dfa3bb1e64f91af307aab32de32db224f6f933b91fc8570e75d34d4fc6e6f0636e30a10222c24921b0e0ed24aa8ab1413b30610af20d4f8a1f3e86473301e415b2dda93f74942f618734861cbe95654a1ac59039034c60fdd112b35be19e75d6cfd2e231d363ebfe0857f6facc73fbf493a6691732161b585dd7a50ced8b1de497d47e62d7795e00a18e799014188f440bc82ea18f5b57896672f5ae10f2e222f72d06326141625d28c87e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x760) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000008c010000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3, @ANYBLOB="e58f48bf21149b68c80765a89e31e917815345b4f5a618756920b2b9bdde7c10052c93d2e4ed3e2143ab5730d6e3e31480ab223dae00a2874a81dd466bc55282b5fd6edb81fdcdc0f214dc18b1895e9abad3f6b0040f2692e83d05421df5b08865c5280328d699871ad51589bae65fe004e696abc7d96188bb8c1c72c9a99dd77f87daeceff9aee90563bb8a8547e1c7e27d8b957ab0db64c11e9f2b0224289c63225647"], 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000a00)={&(0x7f0000000980)={0x2, 0x0, 0x3f25148f, {r5, r6/1000+60000}, {0x0, 0x2710}, {0x4}, 0x1, @canfd={{}, 0x5, 0x3, 0x0, 0x0, "c942cb6aa39270b6ff9fd3b48e74904e941357ca753db3fd14038872b172ad7a1f58953d9026ea944f3f4d786c27e43d29538e3b6354aaf910e8769283220105"}}, 0x80}, 0x1, 0x0, 0x0, 0x400004c}, 0x8844) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) sendmsg$nl_route(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@ipv6_newnexthop={0x24, 0x68, 0x20, 0x70bd2d, 0x9, {0xa, 0x0, 0x4, 0x0, 0x9}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 09:16:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x30750000, 0x0, 0x0}) 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x28c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1548.493804][T28054] usb usb5: usbfs: process 28054 (syz-executor.5) did not claim interface 0 before use [ 1548.502066][T28059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1548.518075][T28054] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x294], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) [ 1548.537716][T28064] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1548.537871][T28052] usb usb5: usbfs: process 28052 (syz-executor.3) did not claim interface 0 before use [ 1548.558016][T28058] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1548.568233][T28065] usb usb5: usbfs: process 28065 (syz-executor.4) did not claim interface 0 before use [ 1548.576436][T28067] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x29c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa00e1ff0000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @multicast2, 0x13, 0x10}}) 09:16:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x6, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x680ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0}) [ 1548.596015][T28065] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1548.603395][T28072] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1548.620604][T28074] usb usb5: usbfs: process 28074 (syz-executor.5) did not claim interface 0 before use [ 1548.633482][T28078] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:16:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) (async) 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2aa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1548.653919][T28080] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1548.670618][T28083] usb usb5: usbfs: process 28083 (syz-executor.4) did not claim interface 0 before use [ 1548.691176][T28089] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 09:16:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0}) 09:16:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x6a0ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2b4], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1548.701773][T28083] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1548.712261][T28085] usb usb5: usbfs: process 28085 (syz-executor.3) did not claim interface 0 before use [ 1548.727119][T28088] usb usb5: usbfs: process 28088 (syz-executor.5) did not claim interface 0 before use [ 1548.739629][T28088] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2d0], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0}) [ 1548.747042][T28092] usb usb5: usbfs: process 28092 (syz-executor.4) did not claim interface 0 before use [ 1548.757031][T28095] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1548.785149][T28097] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1548.803278][T28104] usb usb5: usbfs: process 28104 (syz-executor.3) did not claim interface 0 before use [ 1548.818324][T28103] usb usb5: usbfs: process 28103 (syz-executor.4) did not claim interface 0 before use [ 1548.828495][T28103] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}) 09:16:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2da], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) (rerun: 32) 09:16:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x8, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0}) 09:16:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa00e1ff0000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) (async) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @multicast2, 0x13, 0x10}}) 09:16:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2ea], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x9, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x2f2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1549.469805][T28112] usb usb5: usbfs: process 28112 (syz-executor.3) did not claim interface 0 before use [ 1549.479669][T28114] usb usb5: usbfs: process 28114 (syz-executor.5) did not claim interface 0 before use [ 1549.492902][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.500432][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x300], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x308], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0}) 09:16:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0}) [ 1549.515806][T28111] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1549.522930][T28113] usb usb5: usbfs: process 28113 (syz-executor.4) did not claim interface 0 before use [ 1549.535276][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.545119][T28125] usb usb5: usbfs: process 28125 (syz-executor.3) did not claim interface 0 before use [ 1549.560567][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xa, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1549.576322][T28134] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1549.594237][T28135] usb usb5: usbfs: process 28135 (syz-executor.4) did not claim interface 0 before use [ 1549.604012][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.616264][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.624872][T28137] usb usb5: usbfs: process 28137 (syz-executor.3) did not claim interface 0 before use [ 1549.636188][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.643285][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.650369][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.657460][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.664630][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.671709][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.678863][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.685942][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.693031][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.700278][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.707389][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.714493][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.721551][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.728829][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.735997][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.743113][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.751385][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.758504][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.765662][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.772735][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.780013][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.787252][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.794482][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.801546][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.808591][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.815669][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x40, 0x18, 0x7f, 0x3, 0x8b, 0x0, &(0x7f00000000c0)="97f81afa88d10b03b21f84b84b88f861dd178646a73a7103c254a73e1d70d9e9c0fb0c28b6c680f8c8addf6fadeafae6666b9918b16c3b27e7cdf546d73a0e4686066f18b184b2f377ba151d3bc73e16c355580e943e9afd69fb5229b9774831a60138e172c5d8131851fabc31a889dae8401af72f882443123de9062027a230649c3e03422ca824c69c62"}) pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00') pivot_root(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file0\x00') ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x31c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0}) 09:16:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x880ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa00e1ff0000000000ea4600"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) (async) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @multicast2, 0x13, 0x10}}) 09:16:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xb, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x320], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1549.822707][T28114] vhci_hcd: default hub control req: a100 v0000 i0000 l0 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x322], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x330], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xc, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x40, 0x18, 0x7f, 0x3, 0x8b, 0x0, &(0x7f00000000c0)="97f81afa88d10b03b21f84b84b88f861dd178646a73a7103c254a73e1d70d9e9c0fb0c28b6c680f8c8addf6fadeafae6666b9918b16c3b27e7cdf546d73a0e4686066f18b184b2f377ba151d3bc73e16c355580e943e9afd69fb5229b9774831a60138e172c5d8131851fabc31a889dae8401af72f882443123de9062027a230649c3e03422ca824c69c62"}) pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00') (async) pivot_root(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file0\x00') ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1549.852862][T28146] usb usb5: usbfs: process 28146 (syz-executor.4) did not claim interface 0 before use [ 1549.865320][T28146] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1549.872793][T28147] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1549.880269][T28143] usb usb5: usbfs: process 28143 (syz-executor.3) did not claim interface 0 before use [ 1549.890022][T28154] usb usb5: usbfs: process 28154 (syz-executor.5) did not claim interface 0 before use 09:16:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x338], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x33a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1549.919846][T28160] usb usb5: usbfs: process 28160 (syz-executor.5) did not claim interface 0 before use [ 1549.943121][T28160] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1549.950551][T28166] usb usb5: usbfs: process 28166 (syz-executor.4) did not claim interface 0 before use [ 1549.960481][T28165] usb usb5: usbfs: process 28165 (syz-executor.3) did not claim interface 0 before use 09:16:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0}) 09:16:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x40, 0x18, 0x7f, 0x3, 0x8b, 0x0, &(0x7f00000000c0)="97f81afa88d10b03b21f84b84b88f861dd178646a73a7103c254a73e1d70d9e9c0fb0c28b6c680f8c8addf6fadeafae6666b9918b16c3b27e7cdf546d73a0e4686066f18b184b2f377ba151d3bc73e16c355580e943e9afd69fb5229b9774831a60138e172c5d8131851fabc31a889dae8401af72f882443123de9062027a230649c3e03422ca824c69c62"}) pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00') (async) pivot_root(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file0\x00') (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 09:16:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xd, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x340], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1549.970719][T28167] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$snapshot(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="1ab8712e16b3a65a9448235f1fa87948641b14d2a5d1e8b38c18aeabba5187", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES16=r2], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) flistxattr(r0, &(0x7f00000001c0)=""/211, 0xd3) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x20102, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0x1, 0x7, 0x8, 0x1, 0x11, "ac2c897fd74bbd17378e64f93081922b5d49c9"}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x101301) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xb}, 0x9, 0x44, &(0x7f0000000040)="c0ce23b4938d95f54c11ab93d5db9fc886c303df97f14ca608b666a8c0", 0x1d, 0x10a, 0xb6, 0x0, 0xfff, 0x0, &(0x7f0000000300)="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"/320}) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x342], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xe, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x35a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xa80ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) [ 1550.014926][T28176] usb usb5: usbfs: process 28176 (syz-executor.3) did not claim interface 0 before use [ 1550.024991][T28174] usb usb5: usbfs: process 28174 (syz-executor.4) did not claim interface 0 before use [ 1550.042909][T28174] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1550.054016][T28181] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x101301) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xb}, 0x9, 0x44, &(0x7f0000000040)="c0ce23b4938d95f54c11ab93d5db9fc886c303df97f14ca608b666a8c0", 0x1d, 0x10a, 0xb6, 0x0, 0xfff, 0x0, &(0x7f0000000300)="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"/320}) syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x101301) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xb}, 0x9, 0x44, &(0x7f0000000040)="c0ce23b4938d95f54c11ab93d5db9fc886c303df97f14ca608b666a8c0", 0x1d, 0x10a, 0xb6, 0x0, 0xfff, 0x0, &(0x7f0000000300)="2a36e8b67c7759d0612ecd87bf51583835f4128160a9312bd53c4c2c44040b1a9ed85c0b4971d665e3fcdb5e4ef0f4adb4d03ccd1304d486f47fe20408e4ad5d1f00000025e8cf224455db503c126bcd20df1a1ccdcf37b58247990e84de9d3dfe8bfcca77850fa5651f92a320bf7e890100c6b2a35ca3f28f6e366d8da776c97a579fde0664a421b507e89951906f213fc1e5b9cdf4ce4c2d123aaa2f0000000000000000000000eef4670a429381ae22d4f5722980d4394cce539e32c5b93cf15419820fb294f3ff5e0bacec6aa7854a01c5102463d6139daec56be5175a830412ba4064b899780dec208919a044e9061fb1a9f005872821a47d0d5da4c2c5c3ef03012bbb1255e90cb5a753fdb41d32d148b04a83dcd6e3b10f82686393306a98500c83673fe357f450588d70c0ca00"/320}) (async) 09:16:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x366], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x10, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1550.094858][T28191] usb usb5: usbfs: process 28191 (syz-executor.3) did not claim interface 0 before use [ 1550.116277][T28196] usb usb5: usbfs: process 28196 (syz-executor.4) did not claim interface 0 before use [ 1550.131247][T28196] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x101301) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xb}, 0x9, 0x44, &(0x7f0000000040)="c0ce23b4938d95f54c11ab93d5db9fc886c303df97f14ca608b666a8c0", 0x1d, 0x10a, 0xb6, 0x0, 0xfff, 0x0, &(0x7f0000000300)="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"/320}) 09:16:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0}) [ 1550.138692][T28200] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1550.160197][T28205] usb usb5: usbfs: process 28205 (syz-executor.3) did not claim interface 0 before use [ 1550.200248][T28210] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) write$snapshot(r1, 0x0, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) (async) write$snapshot(r2, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="1ab8712e16b3a65a9448235f1fa87948641b14d2a5d1e8b38c18aeabba5187", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES16=r2], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) flistxattr(r0, &(0x7f00000001c0)=""/211, 0xd3) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x20102, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) (async) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0x1, 0x7, 0x8, 0x1, 0x11, "ac2c897fd74bbd17378e64f93081922b5d49c9"}) (async) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x372], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}) 09:16:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="7b64aa710bed61d749deca09c1446898d60a9738cc039912fe315783fbbab265befaf80363cd178b594c320adde49d59be2f5334bbfe220f6d923f270b16afb8feefde3cd2ab78d8ebac3a1599b0d7a0063523b422214da420a90bbd4b76680af3859c425b682294e31006acd25681dbbd432258fd7bd298a7cb1361db1bcad55bde33761af196aa6d80a639fe209bded08a8356475f44469447cd9c7b940f2d4e9824cebfeec0c3a970db39245671476965b295f64849c883aee9aa3529caff65ed4e2a393c48a61d63b2c142c46b093cd7832c56da1670954ac931b2553166d5efb0f2c9fc"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffe, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) 09:16:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x11, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x37a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1550.883296][T28214] usb usb5: usbfs: process 28214 (syz-executor.5) did not claim interface 0 before use [ 1550.900016][T28214] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1550.907632][T28215] usb usb5: usbfs: process 28215 (syz-executor.4) did not claim interface 0 before use [ 1550.917520][T28216] usb usb5: usbfs: process 28216 (syz-executor.3) did not claim interface 0 before use 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x382], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="7b64aa710bed61d749deca09c1446898d60a9738cc039912fe315783fbbab265befaf80363cd178b594c320adde49d59be2f5334bbfe220f6d923f270b16afb8feefde3cd2ab78d8ebac3a1599b0d7a0063523b422214da420a90bbd4b76680af3859c425b682294e31006acd25681dbbd432258fd7bd298a7cb1361db1bcad55bde33761af196aa6d80a639fe209bded08a8356475f44469447cd9c7b940f2d4e9824cebfeec0c3a970db39245671476965b295f64849c883aee9aa3529caff65ed4e2a393c48a61d63b2c142c46b093cd7832c56da1670954ac931b2553166d5efb0f2c9fc"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffe, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="7b64aa710bed61d749deca09c1446898d60a9738cc039912fe315783fbbab265befaf80363cd178b594c320adde49d59be2f5334bbfe220f6d923f270b16afb8feefde3cd2ab78d8ebac3a1599b0d7a0063523b422214da420a90bbd4b76680af3859c425b682294e31006acd25681dbbd432258fd7bd298a7cb1361db1bcad55bde33761af196aa6d80a639fe209bded08a8356475f44469447cd9c7b940f2d4e9824cebfeec0c3a970db39245671476965b295f64849c883aee9aa3529caff65ed4e2a393c48a61d63b2c142c46b093cd7832c56da1670954ac931b2553166d5efb0f2c9fc"}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffe, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) (async) 09:16:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xc200000, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x12, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0}) [ 1550.933774][T28221] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x38a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:18 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$snapshot(r1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) write$snapshot(r2, 0x0, 0x0) (async) write$snapshot(r2, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="1ab8712e16b3a65a9448235f1fa87948641b14d2a5d1e8b38c18aeabba5187", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES16=r2], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) flistxattr(r0, &(0x7f00000001c0)=""/211, 0xd3) (async) flistxattr(r0, &(0x7f00000001c0)=""/211, 0xd3) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x20102, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) (async) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$TCSETS(r5, 0x5402, &(0x7f00000002c0)={0x1, 0x7, 0x8, 0x1, 0x11, "ac2c897fd74bbd17378e64f93081922b5d49c9"}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff, 0x0, "e804639c66360d7aee209299b8c0114d80596d"}) [ 1550.975808][T28233] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1550.985586][T28229] usb usb5: usbfs: process 28229 (syz-executor.5) did not claim interface 0 before use [ 1550.996615][T28229] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1551.008947][T28236] usb usb5: usbfs: process 28236 (syz-executor.3) did not claim interface 0 before use 09:16:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x38e], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x39a], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x3, 0x4, &(0x7f00000000c0)="7b64aa710bed61d749deca09c1446898d60a9738cc039912fe315783fbbab265befaf80363cd178b594c320adde49d59be2f5334bbfe220f6d923f270b16afb8feefde3cd2ab78d8ebac3a1599b0d7a0063523b422214da420a90bbd4b76680af3859c425b682294e31006acd25681dbbd432258fd7bd298a7cb1361db1bcad55bde33761af196aa6d80a639fe209bded08a8356475f44469447cd9c7b940f2d4e9824cebfeec0c3a970db39245671476965b295f64849c883aee9aa3529caff65ed4e2a393c48a61d63b2c142c46b093cd7832c56da1670954ac931b2553166d5efb0f2c9fc"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffe, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) 09:16:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x25, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x39c], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1551.019072][T28237] usb usb5: usbfs: process 28237 (syz-executor.4) did not claim interface 0 before use [ 1551.040671][T28245] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1551.053340][T28248] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1551.066537][T28252] usb usb5: usbfs: process 28252 (syz-executor.4) did not claim interface 0 before use 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3a4], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) 09:16:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xda3ffff, 0x0, 0x0, 0x0, 0x0}) 09:16:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3aa], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1551.089223][T28252] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1551.097347][T28258] usb usb5: usbfs: process 28258 (syz-executor.5) did not claim interface 0 before use [ 1551.113128][T28258] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 1551.120519][T28260] usb usb5: usbfs: process 28260 (syz-executor.3) did not claim interface 0 before use [ 1551.137125][T28262] usb usb5: usbfs: process 28262 (syz-executor.4) did not claim interface 0 before use [ 1551.149641][T28262] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1551.157120][T28266] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 09:16:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x48, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3ba], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) 09:16:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x810, r0, 0x1bacc000) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0x8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x7ffd, 0x0, "e8a8435208e4b3f74e209299b8c0114d80596d"}) 09:16:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3bc], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x4c, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3c2], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 1551.863838][T28275] usb usb5: usbfs: process 28275 (syz-executor.4) did not claim interface 0 before use [ 1551.877453][T28275] vhci_hcd: default hub control req: a10c v0000 i0000 l0 [ 1551.886747][T28276] usb usb5: usbfs: process 28276 (syz-executor.3) did not claim interface 0 before use [ 1551.896831][T28278] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1551.903914][T28279] usb usb5: usbfs: process 28279 (syz-executor.5) did not claim interface 0 before use 09:16:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3c8], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) [ 1551.954305][T28285] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1551.968011][T28291] usb usb5: usbfs: process 28291 (syz-executor.5) did not claim interface 0 before use 09:16:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3cc], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1551.997834][T28288] usb usb5: usbfs: process 28288 (syz-executor.3) did not claim interface 0 before use [ 1552.013827][T28295] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 [ 1552.030975][T28305] usb usb5: usbfs: process 28305 (syz-executor.5) did not claim interface 0 before use 09:16:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}) 09:16:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x60, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1552.272458][T28308] usb usb5: usbfs: process 28308 (syz-executor.3) did not claim interface 0 before use [ 1552.314905][T28310] usb usb5: usbfs: process 28310 (syz-executor.4) did not claim interface 0 before use [ 1552.324696][T28310] vhci_hcd: default hub control req: a10c v0000 i0000 l0 09:16:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x3ce], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 09:16:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) write$snapshot(r1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r2, &(0x7f0000000100)=0x10000, 0x1) 09:16:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x68, 0x0, &(0x7f0000000000)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:16:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa1, 0xc}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0}) 09:16:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00bbecd836fa0000000000000000ea4600"}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x810, r0, 0x1bacc000) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0x8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000