x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 2186.992190][T22479] usb usb9: usbfs: process 22479 (syz-executor.4) did not claim interface 0 before use 13:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x9, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xfeffffff}, 0x0) 13:28:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x10, 0x0, 0x0}) [ 2187.051294][T22481] device batadv0 entered promiscuous mode [ 2187.091946][T22481] device batadv0 left promiscuous mode [ 2187.160585][T22482] device batadv0 entered promiscuous mode [ 2187.184138][T22482] device batadv0 left promiscuous mode [ 2187.240160][T22485] device batadv0 entered promiscuous mode [ 2187.264045][T22485] device batadv0 left promiscuous mode 13:28:01 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:01 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:01 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xff0f0000}, 0x0) 13:28:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x11, 0x0, 0x0}) [ 2187.389682][T22492] usb usb9: usbfs: process 22492 (syz-executor.4) did not claim interface 0 before use 13:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x10, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 2187.565531][T22501] device batadv0 entered promiscuous mode [ 2187.594186][T22501] device batadv0 left promiscuous mode [ 2187.686263][T22502] device batadv0 entered promiscuous mode [ 2187.711482][T22502] device batadv0 left promiscuous mode [ 2187.770189][T22504] device batadv0 entered promiscuous mode [ 2187.793649][T22504] device batadv0 left promiscuous mode [ 2187.824844][T22508] usb usb9: usbfs: process 22508 (syz-executor.4) did not claim interface 0 before use 13:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x11, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:01 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:01 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x12, 0x0, 0x0}) 13:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xffffff9e}, 0x0) 13:28:01 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x18, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2188.087066][T22522] device batadv0 entered promiscuous mode [ 2188.116164][T22522] device batadv0 left promiscuous mode [ 2188.188736][T22526] device batadv0 entered promiscuous mode [ 2188.219116][T22526] device batadv0 left promiscuous mode 13:28:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x25, 0x0, 0x0}) [ 2188.245953][T22528] usb usb9: usbfs: process 22528 (syz-executor.4) did not claim interface 0 before use [ 2188.283060][T22527] device batadv0 entered promiscuous mode 13:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x106, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xffffffa7}, 0x0) [ 2188.306987][T22527] device batadv0 left promiscuous mode 13:28:02 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x11, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2188.388513][T22536] device batadv0 entered promiscuous mode [ 2188.403089][T22536] device batadv0 left promiscuous mode 13:28:02 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:02 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2188.459453][T22541] usb usb9: usbfs: process 22541 (syz-executor.4) did not claim interface 0 before use 13:28:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x48, 0x0, 0x0}) 13:28:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xffffffef}, 0x0) [ 2188.544320][T22544] device batadv0 entered promiscuous mode [ 2188.570424][T22544] device batadv0 left promiscuous mode 13:28:02 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x12, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2188.749908][T22553] device batadv0 entered promiscuous mode [ 2188.771887][T22553] device batadv0 left promiscuous mode [ 2188.841190][T22558] usb usb9: usbfs: process 22558 (syz-executor.4) did not claim interface 0 before use 13:28:02 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4c, 0x0, 0x0}) 13:28:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 2188.895888][T22557] device batadv0 entered promiscuous mode [ 2188.931894][T22557] device batadv0 left promiscuous mode [ 2189.000196][T22562] device batadv0 entered promiscuous mode [ 2189.025554][T22562] device batadv0 left promiscuous mode 13:28:03 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2189.070012][T22565] MPTCP: kernel_bind error, err=-98 13:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:03 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x21, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2189.070636][T22566] MPTCP: kernel_bind error, err=-98 [ 2189.173650][T22572] device batadv0 entered promiscuous mode [ 2189.205365][T22572] device batadv0 left promiscuous mode 13:28:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x60, 0x0, 0x0}) 13:28:03 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x12, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xfffffffe}, 0x0) [ 2189.240763][T22573] usb usb9: usbfs: process 22573 (syz-executor.4) did not claim interface 0 before use 13:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2189.416000][T22579] device batadv0 entered promiscuous mode [ 2189.445805][T22579] device batadv0 left promiscuous mode 13:28:03 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x11, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2189.517278][T22582] device batadv0 entered promiscuous mode [ 2189.548413][T22582] device batadv0 left promiscuous mode [ 2189.609945][T22587] usb usb9: usbfs: process 22587 (syz-executor.4) did not claim interface 0 before use 13:28:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x3000000000000}, 0x0) 13:28:03 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x25, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x68, 0x0, 0x0}) [ 2189.681533][T22589] device batadv0 entered promiscuous mode 13:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2189.724966][T22589] device batadv0 left promiscuous mode [ 2189.735487][T22593] MPTCP: kernel_bind error, err=-98 [ 2189.736227][T22594] MPTCP: kernel_bind error, err=-98 [ 2189.841388][T22597] device batadv0 entered promiscuous mode [ 2189.874597][T22597] device batadv0 left promiscuous mode 13:28:03 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:03 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x12, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 2189.982157][T22603] usb usb9: usbfs: process 22603 (syz-executor.4) did not claim interface 0 before use 13:28:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6c, 0x0, 0x0}) 13:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2190.045350][T22605] device batadv0 entered promiscuous mode [ 2190.073178][T22605] device batadv0 left promiscuous mode [ 2190.087617][T22606] MPTCP: kernel_bind error, err=-98 13:28:04 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 2190.088316][T22607] MPTCP: kernel_bind error, err=-98 [ 2190.233833][T22616] device batadv0 entered promiscuous mode [ 2190.264017][T22616] device batadv0 left promiscuous mode 13:28:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x74, 0x0, 0x0}) [ 2190.333364][T22617] device batadv0 entered promiscuous mode [ 2190.341660][T22618] usb usb9: usbfs: process 22618 (syz-executor.4) did not claim interface 0 before use [ 2190.385184][T22617] device batadv0 left promiscuous mode 13:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x25}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:04 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:04 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x21, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2190.529962][T22625] device batadv0 entered promiscuous mode [ 2190.551805][T22625] device batadv0 left promiscuous mode 13:28:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7a, 0x0, 0x0}) 13:28:04 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2190.598075][T22629] usb usb9: usbfs: process 22629 (syz-executor.4) did not claim interface 0 before use 13:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7ffffffd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2190.685815][T22635] device batadv0 entered promiscuous mode [ 2190.711916][T22636] MPTCP: kernel_bind error, err=-98 [ 2190.712482][T22635] device batadv0 left promiscuous mode [ 2190.719547][T22637] MPTCP: kernel_bind error, err=-98 [ 2190.792318][T22638] device batadv0 entered promiscuous mode [ 2190.823152][T22638] device batadv0 left promiscuous mode 13:28:04 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x25, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:04 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x25, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x204000000000000}, 0x0) 13:28:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x300, 0x0, 0x0}) [ 2190.970872][T22645] usb usb9: usbfs: process 22645 (syz-executor.4) did not claim interface 0 before use [ 2191.038253][T22647] device batadv0 entered promiscuous mode [ 2191.063297][T22647] device batadv0 left promiscuous mode 13:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x4, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2191.117495][T22650] MPTCP: kernel_bind error, err=-98 13:28:05 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x48, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2191.120982][T22651] MPTCP: kernel_bind error, err=-98 [ 2191.191867][T22654] device batadv0 entered promiscuous mode [ 2191.223869][T22654] device batadv0 left promiscuous mode [ 2191.310032][T22656] device batadv0 entered promiscuous mode [ 2191.335020][T22656] device batadv0 left promiscuous mode 13:28:05 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:05 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x25, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x500, 0x0, 0x0}) [ 2191.439991][T22661] usb usb9: usbfs: process 22661 (syz-executor.4) did not claim interface 0 before use [ 2191.506028][T22665] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2191.518694][T22666] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 13:28:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x400000000000000}, 0x0) 13:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x5, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2191.571840][T22667] device batadv0 entered promiscuous mode [ 2191.592205][T22667] device batadv0 left promiscuous mode [ 2191.691903][T22672] device batadv0 entered promiscuous mode [ 2191.725554][T22672] device batadv0 left promiscuous mode 13:28:05 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x600, 0x0, 0x0}) [ 2191.763561][T22675] usb usb9: usbfs: process 22675 (syz-executor.4) did not claim interface 0 before use [ 2191.784246][T22673] device batadv0 entered promiscuous mode [ 2191.805309][T22673] device batadv0 left promiscuous mode 13:28:05 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:05 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xff19, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x500000000000000}, 0x0) 13:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x7, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2191.884750][T22682] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2191.909298][T22684] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2191.956669][T22687] usb usb9: usbfs: process 22687 (syz-executor.4) did not claim interface 0 before use 13:28:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x700, 0x0, 0x0}) [ 2192.008796][T22689] device batadv0 entered promiscuous mode [ 2192.045123][T22689] device batadv0 left promiscuous mode [ 2192.115607][T22690] device batadv0 entered promiscuous mode [ 2192.144175][T22690] device batadv0 left promiscuous mode 13:28:06 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 2192.216833][T22704] usb usb9: usbfs: process 22704 (syz-executor.4) did not claim interface 0 before use [ 2192.228846][T22705] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2192.255290][T22707] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 13:28:06 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x48, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x900, 0x0, 0x0}) 13:28:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x9, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2192.295559][T22703] device batadv0 entered promiscuous mode 13:28:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 2192.353446][T22703] device batadv0 left promiscuous mode 13:28:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 2192.412532][T22709] device batadv0 entered promiscuous mode [ 2192.440504][T22709] device batadv0 left promiscuous mode [ 2192.514922][T22713] device batadv0 entered promiscuous mode [ 2192.540168][T22713] device batadv0 left promiscuous mode [ 2192.576432][T22721] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2192.584837][T22720] usb usb9: usbfs: process 22720 (syz-executor.4) did not claim interface 0 before use 13:28:06 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:06 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2192.629953][T22724] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 13:28:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x900000000000000}, 0x0) 13:28:06 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xa00, 0x0, 0x0}) 13:28:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x10, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2192.768739][T22728] device batadv0 entered promiscuous mode [ 2192.793993][T22728] device batadv0 left promiscuous mode 13:28:06 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2192.951753][T22734] device batadv0 entered promiscuous mode [ 2192.976666][T22734] device batadv0 left promiscuous mode [ 2193.056048][T22738] device batadv0 entered promiscuous mode [ 2193.079836][T22738] device batadv0 left promiscuous mode 13:28:07 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2193.107586][T22739] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2193.121484][T22740] usb usb9: usbfs: process 22740 (syz-executor.4) did not claim interface 0 before use [ 2193.133769][T22741] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 13:28:07 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xb00, 0x0, 0x0}) 13:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x11, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x1a23000000000000}, 0x0) [ 2193.239116][T22745] device batadv0 entered promiscuous mode [ 2193.268516][T22745] device batadv0 left promiscuous mode 13:28:07 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x68, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2193.428460][T22755] device batadv0 entered promiscuous mode [ 2193.454535][T22755] device batadv0 left promiscuous mode [ 2193.498685][T22759] usb usb9: usbfs: process 22759 (syz-executor.4) did not claim interface 0 before use 13:28:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xc00, 0x0, 0x0}) 13:28:07 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x48, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x2000000000000000}, 0x0) [ 2193.558033][T22760] device batadv0 entered promiscuous mode [ 2193.584505][T22760] device batadv0 left promiscuous mode [ 2193.592651][T22763] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 13:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x18, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2193.619802][T22765] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2193.692032][T22766] device batadv0 entered promiscuous mode [ 2193.723769][T22766] device batadv0 left promiscuous mode [ 2193.754979][T22770] usb usb9: usbfs: process 22770 (syz-executor.4) did not claim interface 0 before use 13:28:07 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2193.796959][T22769] device batadv0 entered promiscuous mode 13:28:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xd00, 0x0, 0x0}) 13:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x106, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x6000000000000000}, 0x0) 13:28:07 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2193.845121][T22769] device batadv0 left promiscuous mode 13:28:07 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x68, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2193.995295][T22785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2194.048524][T22786] device batadv0 entered promiscuous mode [ 2194.073198][T22787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2194.084029][T22786] device batadv0 left promiscuous mode 13:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x8000000000000000}, 0x0) 13:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x2, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xe00, 0x0, 0x0}) [ 2194.102451][T22791] usb usb9: usbfs: process 22791 (syz-executor.4) did not claim interface 0 before use [ 2194.193476][T22789] device batadv0 entered promiscuous mode [ 2194.217762][T22789] device batadv0 left promiscuous mode 13:28:08 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2194.278414][T22793] device batadv0 entered promiscuous mode [ 2194.310406][T22793] device batadv0 left promiscuous mode 13:28:08 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x74, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:08 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x68, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 13:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x3, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x1100, 0x0, 0x0}) [ 2194.456050][T22803] usb usb9: usbfs: process 22803 (syz-executor.4) did not claim interface 0 before use 13:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xa7ffffff00000000}, 0x0) [ 2194.540483][T22806] device batadv0 entered promiscuous mode [ 2194.563657][T22806] device batadv0 left promiscuous mode 13:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x6, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2194.627151][T22807] device batadv0 entered promiscuous mode [ 2194.670332][T22807] device batadv0 left promiscuous mode [ 2194.730576][T22813] device batadv0 entered promiscuous mode [ 2194.762900][T22813] device batadv0 left promiscuous mode 13:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xefffffff00000000}, 0x0) 13:28:08 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2194.813842][T22819] device batadv0 entered promiscuous mode 13:28:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x1200, 0x0, 0x0}) 13:28:08 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:08 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x68, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x7, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2194.856038][T22819] device batadv0 left promiscuous mode [ 2194.881061][T22825] usb usb9: usbfs: process 22825 (syz-executor.4) did not claim interface 0 before use 13:28:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 2195.029640][T22832] device batadv0 entered promiscuous mode [ 2195.051935][T22832] device batadv0 left promiscuous mode 13:28:09 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x9, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2195.199462][T22838] device batadv0 entered promiscuous mode [ 2195.222925][T22838] device batadv0 left promiscuous mode [ 2195.233369][T22842] usb usb9: usbfs: process 22842 (syz-executor.4) did not claim interface 0 before use 13:28:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x2000, 0x0, 0x0}) 13:28:09 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2195.293643][T22839] device batadv0 entered promiscuous mode [ 2195.315984][T22839] device batadv0 left promiscuous mode 13:28:09 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) [ 2195.483581][T22850] device batadv0 entered promiscuous mode [ 2195.509433][T22850] device batadv0 left promiscuous mode [ 2195.559529][T22852] usb usb9: usbfs: process 22852 (syz-executor.4) did not claim interface 0 before use 13:28:09 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb8, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x10, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x2500, 0x0, 0x0}) [ 2195.652985][T22858] device batadv0 entered promiscuous mode [ 2195.685915][T22858] device batadv0 left promiscuous mode 13:28:09 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x74, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2195.744173][T22859] device batadv0 entered promiscuous mode [ 2195.767696][T22859] device batadv0 left promiscuous mode 13:28:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xff0f000000000000}, 0x0) 13:28:09 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2195.948742][T22868] device batadv0 entered promiscuous mode [ 2195.973645][T22868] device batadv0 left promiscuous mode [ 2195.981560][T22869] usb usb9: usbfs: process 22869 (syz-executor.4) did not claim interface 0 before use 13:28:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x3f00, 0x0, 0x0}) 13:28:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x25, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:10 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 2196.139228][T22875] device batadv0 entered promiscuous mode [ 2196.164892][T22875] device batadv0 left promiscuous mode 13:28:10 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2196.279940][T22882] device batadv0 entered promiscuous mode [ 2196.305770][T22882] device batadv0 left promiscuous mode 13:28:10 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2196.376818][T22886] usb usb9: usbfs: process 22886 (syz-executor.4) did not claim interface 0 before use 13:28:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4800, 0x0, 0x0}) [ 2196.433236][T22888] device batadv0 entered promiscuous mode [ 2196.457460][T22888] device batadv0 left promiscuous mode 13:28:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 2196.557173][T22894] device batadv0 entered promiscuous mode [ 2196.589134][T22894] device batadv0 left promiscuous mode 13:28:10 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:10 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2196.694811][T22904] usb usb9: usbfs: process 22904 (syz-executor.4) did not claim interface 0 before use 13:28:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4c00, 0x0, 0x0}) 13:28:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e03}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2196.714215][T22907] MPTCP: kernel_bind error, err=-98 [ 2196.753415][T22905] device batadv0 entered promiscuous mode [ 2196.791799][T22905] device batadv0 left promiscuous mode 13:28:10 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb8, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2196.976703][T22913] device batadv0 entered promiscuous mode [ 2197.001620][T22913] device batadv0 left promiscuous mode 13:28:11 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x134, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2197.078838][T22914] device batadv0 entered promiscuous mode [ 2197.105388][T22914] device batadv0 left promiscuous mode [ 2197.157934][T22920] usb usb9: usbfs: process 22920 (syz-executor.4) did not claim interface 0 before use 13:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e08}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6000, 0x0, 0x0}) [ 2197.170691][T22921] MPTCP: kernel_bind error, err=-98 [ 2197.221799][T22922] device batadv0 entered promiscuous mode 13:28:11 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2197.268429][T22922] device batadv0 left promiscuous mode 13:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) 13:28:11 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e0a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6800, 0x0, 0x0}) [ 2197.441684][T22932] MPTCP: kernel_bind error, err=-98 [ 2197.482273][T22933] device batadv0 entered promiscuous mode [ 2197.513077][T22934] usb usb9: usbfs: process 22934 (syz-executor.4) did not claim interface 0 before use [ 2197.513289][T22933] device batadv0 left promiscuous mode 13:28:11 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x184, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2197.611594][T22935] device batadv0 entered promiscuous mode [ 2197.633898][T22935] device batadv0 left promiscuous mode [ 2197.724850][T22939] device batadv0 entered promiscuous mode 13:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x3}, 0x0) 13:28:11 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x134, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2197.765323][T22939] device batadv0 left promiscuous mode 13:28:11 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6c00, 0x0, 0x0}) 13:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2197.911827][T22947] MPTCP: kernel_bind error, err=-98 [ 2197.947347][T22950] usb usb9: usbfs: process 22950 (syz-executor.4) did not claim interface 0 before use [ 2198.009248][T22952] device batadv0 entered promiscuous mode [ 2198.032276][T22952] device batadv0 left promiscuous mode [ 2198.144411][T22956] device batadv0 entered promiscuous mode [ 2198.170230][T22956] device batadv0 left promiscuous mode 13:28:12 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x192, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2198.234691][T22957] device batadv0 entered promiscuous mode [ 2198.256079][T22963] usb usb9: usbfs: process 22963 (syz-executor.4) did not claim interface 0 before use [ 2198.266301][T22957] device batadv0 left promiscuous mode 13:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) 13:28:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7400, 0x0, 0x0}) 13:28:12 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x184, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2198.280067][T22965] MPTCP: kernel_bind error, err=-98 [ 2198.319807][T22969] device batadv0 entered promiscuous mode [ 2198.353724][T22969] device batadv0 left promiscuous mode 13:28:12 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x184, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2198.428222][T22971] device batadv0 entered promiscuous mode [ 2198.452148][T22971] device batadv0 left promiscuous mode 13:28:12 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x196, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e25}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x6}, 0x0) 13:28:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7a00, 0x0, 0x0}) [ 2198.581725][T22979] MPTCP: kernel_bind error, err=-98 [ 2198.596838][T22981] usb usb9: usbfs: process 22981 (syz-executor.4) did not claim interface 0 before use [ 2198.684054][T22983] device batadv0 entered promiscuous mode [ 2198.711069][T22983] device batadv0 left promiscuous mode [ 2198.813439][T22985] device batadv0 entered promiscuous mode [ 2198.838762][T22985] device batadv0 left promiscuous mode 13:28:12 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x192, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e29}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:12 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x192, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2198.912067][T22986] device batadv0 entered promiscuous mode [ 2198.932611][T22986] device batadv0 left promiscuous mode 13:28:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) 13:28:13 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1be, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x20000, 0x0, 0x0}) [ 2198.999152][T22993] usb usb9: usbfs: process 22993 (syz-executor.4) did not claim interface 0 before use 13:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x4, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2199.129804][T22999] device batadv0 entered promiscuous mode [ 2199.160167][T22999] device batadv0 left promiscuous mode [ 2199.266879][T23003] device batadv0 entered promiscuous mode [ 2199.293781][T23003] device batadv0 left promiscuous mode 13:28:13 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xff19, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2199.357533][T23007] device batadv0 entered promiscuous mode [ 2199.368297][T23007] device batadv0 left promiscuous mode [ 2199.377743][T23012] usb usb9: usbfs: process 23012 (syz-executor.4) did not claim interface 0 before use 13:28:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x0) 13:28:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x1000000, 0x0, 0x0}) [ 2199.425677][T23010] device batadv0 entered promiscuous mode [ 2199.468202][T23010] device batadv0 left promiscuous mode 13:28:13 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x196, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x5, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:13 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x212, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2199.510018][T23014] validate_nla: 10 callbacks suppressed [ 2199.510036][T23014] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2199.528122][T23015] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2199.646893][T23021] device batadv0 entered promiscuous mode [ 2199.660300][T23022] usb usb9: usbfs: process 23022 (syz-executor.4) did not claim interface 0 before use 13:28:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x9}, 0x0) 13:28:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x2000000, 0x0, 0x0}) [ 2199.689107][T23021] device batadv0 left promiscuous mode [ 2199.736480][T23029] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x7, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:13 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1be, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2199.791412][T23027] device batadv0 entered promiscuous mode [ 2199.802045][T23030] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2199.814752][T23027] device batadv0 left promiscuous mode 13:28:13 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1be, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2199.928054][T23033] device batadv0 entered promiscuous mode [ 2199.970124][T23033] device batadv0 left promiscuous mode 13:28:14 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x266, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xf}, 0x0) 13:28:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x3000000, 0x0, 0x0}) [ 2200.064140][T23039] usb usb9: usbfs: process 23039 (syz-executor.4) did not claim interface 0 before use 13:28:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x9, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2200.110214][T23043] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2200.122218][T23044] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2200.188734][T23046] device batadv0 entered promiscuous mode [ 2200.206565][T23046] device batadv0 left promiscuous mode [ 2200.278444][T23047] device batadv0 entered promiscuous mode [ 2200.308682][T23047] device batadv0 left promiscuous mode 13:28:14 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1be, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2200.399843][T23048] device batadv0 entered promiscuous mode [ 2200.424487][T23048] device batadv0 left promiscuous mode 13:28:14 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x212, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:14 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2a2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x60}, 0x0) 13:28:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4000000, 0x0, 0x0}) [ 2200.573138][T23056] usb usb9: usbfs: process 23056 (syz-executor.4) did not claim interface 0 before use [ 2200.607173][T23057] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:28:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x10, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2200.620093][T23059] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2200.698090][T23061] device batadv0 entered promiscuous mode [ 2200.721818][T23061] device batadv0 left promiscuous mode [ 2200.795756][T23064] device batadv0 entered promiscuous mode [ 2200.821071][T23064] device batadv0 left promiscuous mode 13:28:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x204}, 0x0) [ 2200.887697][T23065] device batadv0 entered promiscuous mode [ 2200.911612][T23065] device batadv0 left promiscuous mode 13:28:14 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2a2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:14 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x212, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:15 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2c6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x5000000, 0x0, 0x0}) [ 2200.980783][T23071] usb usb9: usbfs: process 23071 (syz-executor.4) did not claim interface 0 before use 13:28:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x11, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 2201.052746][T23074] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2201.063468][T23077] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2201.148241][T23080] device batadv0 entered promiscuous mode [ 2201.174959][T23080] device batadv0 left promiscuous mode [ 2201.233801][T23082] device batadv0 entered promiscuous mode [ 2201.254969][T23082] device batadv0 left promiscuous mode [ 2201.272151][T23086] usb usb9: usbfs: process 23086 (syz-executor.4) did not claim interface 0 before use 13:28:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6000000, 0x0, 0x0}) [ 2201.329787][T23085] device batadv0 entered promiscuous mode [ 2201.360090][T23085] device batadv0 left promiscuous mode 13:28:15 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2c6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x402}, 0x0) 13:28:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7000000, 0x0, 0x0}) 13:28:15 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x18, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:15 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2a2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2201.372779][T23094] usb usb9: usbfs: process 23094 (syz-executor.4) did not claim interface 0 before use [ 2201.382639][T23091] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2201.405907][T23095] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 13:28:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 2201.544154][T23099] device batadv0 entered promiscuous mode [ 2201.571712][T23099] device batadv0 left promiscuous mode 13:28:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x8000000, 0x0, 0x0}) [ 2201.641896][T23105] device batadv0 entered promiscuous mode [ 2201.651468][T23105] device batadv0 left promiscuous mode [ 2201.664234][T23107] usb usb9: usbfs: process 23107 (syz-executor.4) did not claim interface 0 before use 13:28:15 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2201.725508][T23109] device batadv0 entered promiscuous mode [ 2201.752910][T23110] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2201.763016][T23111] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2201.774300][T23109] device batadv0 left promiscuous mode 13:28:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x106, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 2201.851158][T23112] device batadv0 entered promiscuous mode [ 2201.873922][T23112] device batadv0 left promiscuous mode 13:28:16 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2201.960637][T23118] device batadv0 entered promiscuous mode [ 2201.983239][T23118] device batadv0 left promiscuous mode [ 2201.983494][T23121] usb usb9: usbfs: process 23121 (syz-executor.4) did not claim interface 0 before use 13:28:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x9000000, 0x0, 0x0}) 13:28:16 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x266, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:16 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2202.121672][T23124] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2202.131692][T23125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 13:28:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 2202.230892][T23132] device batadv0 entered promiscuous mode [ 2202.252620][T23132] device batadv0 left promiscuous mode [ 2202.279451][T23135] usb usb9: usbfs: process 23135 (syz-executor.4) did not claim interface 0 before use 13:28:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xa000000, 0x0, 0x0}) [ 2202.322493][T23134] device batadv0 entered promiscuous mode [ 2202.362024][T23134] device batadv0 left promiscuous mode 13:28:16 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:16 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x31e, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2202.436405][T23136] device batadv0 entered promiscuous mode [ 2202.462655][T23136] device batadv0 left promiscuous mode 13:28:16 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x31e, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x3, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x900}, 0x0) 13:28:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xb000000, 0x0, 0x0}) [ 2202.618713][T23148] usb usb9: usbfs: process 23148 (syz-executor.4) did not claim interface 0 before use [ 2202.691336][T23150] device batadv0 entered promiscuous mode [ 2202.714531][T23150] device batadv0 left promiscuous mode [ 2202.774875][T23152] device batadv0 entered promiscuous mode [ 2202.801280][T23152] device batadv0 left promiscuous mode 13:28:16 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x5, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2202.894037][T23155] device batadv0 entered promiscuous mode [ 2202.903706][T23157] usb usb9: usbfs: process 23157 (syz-executor.4) did not claim interface 0 before use 13:28:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xc000000, 0x0, 0x0}) 13:28:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 13:28:17 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x32e, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2202.971083][T23155] device batadv0 left promiscuous mode 13:28:17 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x32e, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1a23}, 0x0) [ 2203.158060][T23170] device batadv0 entered promiscuous mode [ 2203.181576][T23170] device batadv0 left promiscuous mode [ 2203.189202][T23174] usb usb9: usbfs: process 23174 (syz-executor.4) did not claim interface 0 before use 13:28:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xd000000, 0x0, 0x0}) [ 2203.280349][T23176] device batadv0 entered promiscuous mode [ 2203.304522][T23176] device batadv0 left promiscuous mode [ 2203.372442][T23177] device batadv0 entered promiscuous mode [ 2203.396041][T23177] device batadv0 left promiscuous mode 13:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x7, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 13:28:17 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x342, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:17 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1be, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2203.450509][T23187] usb usb9: usbfs: process 23187 (syz-executor.4) did not claim interface 0 before use 13:28:17 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x342, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xe000000, 0x0, 0x0}) 13:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x8, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x231a}, 0x0) [ 2203.653795][T23196] device batadv0 entered promiscuous mode [ 2203.732738][T23201] usb usb9: usbfs: process 23201 (syz-executor.4) did not claim interface 0 before use [ 2203.739079][T23196] device batadv0 left promiscuous mode 13:28:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x10000000, 0x0, 0x0}) [ 2203.853275][T23195] device batadv0 entered promiscuous mode [ 2203.877821][T23195] device batadv0 left promiscuous mode 13:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x9, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 2203.943560][T23199] device batadv0 entered promiscuous mode [ 2203.970136][T23199] device batadv0 left promiscuous mode 13:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0xa, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:18 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x380, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:18 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x348, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:18 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x192, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2204.052726][T23216] usb usb9: usbfs: process 23216 (syz-executor.4) did not claim interface 0 before use 13:28:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xff0f}, 0x0) 13:28:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x11000000, 0x0, 0x0}) [ 2204.226110][T23224] device batadv0 entered promiscuous mode 13:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x10, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000}, 0x0) [ 2204.316877][T23230] usb usb9: usbfs: process 23230 (syz-executor.4) did not claim interface 0 before use [ 2204.336046][T23224] device batadv0 left promiscuous mode 13:28:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x12000000, 0x0, 0x0}) 13:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1b, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 2204.457815][T23226] device batadv0 entered promiscuous mode 13:28:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x20000000, 0x0, 0x0}) [ 2204.528492][T23240] usb usb9: usbfs: process 23240 (syz-executor.4) did not claim interface 0 before use [ 2204.548955][T23226] device batadv0 left promiscuous mode 13:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x25, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2204.649152][T23229] device batadv0 entered promiscuous mode [ 2204.721610][T23229] device batadv0 left promiscuous mode [ 2204.724172][T23251] usb usb9: usbfs: process 23251 (syz-executor.4) did not claim interface 0 before use [ 2204.767226][T23226] device batadv0 entered promiscuous mode [ 2204.791125][T23226] device batadv0 left promiscuous mode 13:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x300, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 13:28:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x25000000, 0x0, 0x0}) 13:28:18 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x35a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:18 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x348, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:18 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x384, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2204.899655][T23260] usb usb9: usbfs: process 23260 (syz-executor.4) did not claim interface 0 before use 13:28:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 13:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x3f000000, 0x0, 0x0}) [ 2204.963980][T23263] device batadv0 entered promiscuous mode [ 2204.988467][T23263] device batadv0 left promiscuous mode 13:28:19 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x380, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2205.135245][T23268] device batadv0 entered promiscuous mode [ 2205.166936][T23268] device batadv0 left promiscuous mode [ 2205.248459][T23269] device batadv0 entered promiscuous mode [ 2205.281840][T23269] device batadv0 left promiscuous mode [ 2205.346810][T23277] usb usb9: usbfs: process 23277 (syz-executor.4) did not claim interface 0 before use 13:28:19 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x35a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 13:28:19 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x38a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x48000000, 0x0, 0x0}) [ 2205.419986][T23280] device batadv0 entered promiscuous mode [ 2205.445082][T23280] device batadv0 left promiscuous mode 13:28:19 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x384, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) 13:28:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4c000000, 0x0, 0x0}) [ 2205.689306][T23292] device batadv0 entered promiscuous mode [ 2205.700351][T23295] usb usb9: usbfs: process 23295 (syz-executor.4) did not claim interface 0 before use [ 2205.747651][T23292] device batadv0 left promiscuous mode [ 2205.800775][T23294] device batadv0 entered promiscuous mode [ 2205.824676][T23294] device batadv0 left promiscuous mode [ 2205.884314][T23296] device batadv0 entered promiscuous mode [ 2205.910113][T23296] device batadv0 left promiscuous mode 13:28:19 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x380, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:19 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:20 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x38a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 13:28:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x60000000, 0x0, 0x0}) [ 2206.099097][T23310] usb usb9: usbfs: process 23310 (syz-executor.4) did not claim interface 0 before use [ 2206.182865][T23314] device batadv0 entered promiscuous mode [ 2206.210349][T23314] device batadv0 left promiscuous mode 13:28:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2206.238620][T23323] usb usb9: usbfs: process 23323 (syz-executor.4) did not claim interface 0 before use 13:28:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x68000000, 0x0, 0x0}) [ 2206.320100][T23313] device batadv0 entered promiscuous mode [ 2206.353366][T23313] device batadv0 left promiscuous mode 13:28:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 2206.411317][T23316] device batadv0 entered promiscuous mode [ 2206.434846][T23316] device batadv0 left promiscuous mode 13:28:20 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a4, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:20 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6c000000, 0x0, 0x0}) 13:28:20 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2206.490011][T23333] usb usb9: usbfs: process 23333 (syz-executor.4) did not claim interface 0 before use 13:28:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 2206.659984][T23345] usb usb9: usbfs: process 23345 (syz-executor.0) did not claim interface 0 before use 13:28:20 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x74000000, 0x0, 0x0}) [ 2206.735945][T23346] device batadv0 entered promiscuous mode [ 2206.747882][T23347] usb usb9: usbfs: process 23347 (syz-executor.4) did not claim interface 0 before use [ 2206.790477][T23346] device batadv0 left promiscuous mode 13:28:20 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3b6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2206.848210][T23348] device batadv0 entered promiscuous mode [ 2206.877759][T23348] device batadv0 left promiscuous mode 13:28:20 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ce, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) [ 2207.073078][T23360] usb usb9: usbfs: process 23360 (syz-executor.4) did not claim interface 0 before use [ 2207.083921][T23361] usb usb9: usbfs: process 23361 (syz-executor.0) did not claim interface 0 before use 13:28:21 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xff17, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 13:28:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7a000000, 0x0, 0x0}) [ 2207.141381][T23363] device batadv0 entered promiscuous mode [ 2207.190851][T23363] device batadv0 left promiscuous mode [ 2207.255980][T23364] device batadv0 entered promiscuous mode [ 2207.279963][T23364] device batadv0 left promiscuous mode 13:28:21 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3d2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:21 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ce, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) [ 2207.426992][T23379] device batadv0 entered promiscuous mode [ 2207.454118][T23379] device batadv0 left promiscuous mode 13:28:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xfdfdffff, 0x0, 0x0}) [ 2207.487003][T23383] usb usb9: usbfs: process 23383 (syz-executor.4) did not claim interface 0 before use 13:28:21 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ce, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2207.592321][T23387] device batadv0 entered promiscuous mode [ 2207.619263][T23387] device batadv0 left promiscuous mode 13:28:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 2207.717148][T23388] device batadv0 entered promiscuous mode [ 2207.753869][T23388] device batadv0 left promiscuous mode 13:28:21 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3e6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2207.791727][T23399] usb usb9: usbfs: process 23399 (syz-executor.4) did not claim interface 0 before use 13:28:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xfffffdfd, 0x0, 0x0}) 13:28:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2d}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2207.840723][T23397] device batadv0 entered promiscuous mode [ 2207.877420][T23397] device batadv0 left promiscuous mode 13:28:21 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3d2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:21 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xff13, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1a230000}, 0x0) [ 2208.117284][T23415] usb usb9: usbfs: process 23415 (syz-executor.4) did not claim interface 0 before use 13:28:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x4, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2208.163189][T23412] device batadv0 entered promiscuous mode 13:28:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xffffff7f, 0x0, 0x0}) [ 2208.224598][T23412] device batadv0 left promiscuous mode 13:28:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 13:28:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2208.314448][T23422] usb usb9: usbfs: process 23422 (syz-executor.4) did not claim interface 0 before use [ 2208.339332][T23416] device batadv0 entered promiscuous mode [ 2208.370827][T23416] device batadv0 left promiscuous mode [ 2208.433345][T23425] validate_nla: 8 callbacks suppressed [ 2208.433359][T23425] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2208.442969][T23417] device batadv0 entered promiscuous mode [ 2208.472042][T23427] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 13:28:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x2, 0x0}) 13:28:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x9, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2208.472293][T23417] device batadv0 left promiscuous mode [ 2208.490502][T23428] usb usb9: usbfs: process 23428 (syz-executor.4) did not claim interface 0 before use 13:28:22 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ea, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 13:28:22 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3e6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:22 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3e6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) [ 2208.654255][T23438] usb usb9: usbfs: process 23438 (syz-executor.4) did not claim interface 0 before use [ 2208.672607][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:28:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 2208.699219][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:28:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x11, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2208.761117][T23444] device batadv0 entered promiscuous mode [ 2208.799580][T23444] device batadv0 left promiscuous mode [ 2208.860240][T23446] device batadv0 entered promiscuous mode [ 2208.885545][T23446] device batadv0 left promiscuous mode 13:28:23 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ee, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2208.967688][T23448] device batadv0 entered promiscuous mode [ 2209.002890][T23448] device batadv0 left promiscuous mode 13:28:23 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3e6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:23 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ea, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x4, 0x0}) 13:28:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xa7ffffff}, 0x0) [ 2209.105642][T23453] usb usb9: usbfs: process 23453 (syz-executor.4) did not claim interface 0 before use 13:28:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x29, 0x3, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2209.159965][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2209.170512][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2209.243176][T23462] device batadv0 entered promiscuous mode [ 2209.269980][T23462] device batadv0 left promiscuous mode [ 2209.336953][T23464] device batadv0 entered promiscuous mode [ 2209.360768][T23464] device batadv0 left promiscuous mode [ 2209.408975][T23465] device batadv0 entered promiscuous mode [ 2209.431580][T23467] usb usb9: usbfs: process 23467 (syz-executor.4) did not claim interface 0 before use 13:28:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x5, 0x0}) [ 2209.456964][T23465] device batadv0 left promiscuous mode 13:28:23 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ee, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:23 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3f6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 13:28:23 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ea, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x2, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2209.586445][T23474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2209.597004][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:28:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) [ 2209.661952][T23477] usb usb9: usbfs: process 23477 (syz-executor.4) did not claim interface 0 before use 13:28:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 2209.771841][T23485] device batadv0 entered promiscuous mode [ 2209.808683][T23485] device batadv0 left promiscuous mode 13:28:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x4, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2209.816535][T23488] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 2209.825773][T23489] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 2209.864727][T23487] device batadv0 entered promiscuous mode [ 2209.891438][T23487] device batadv0 left promiscuous mode 13:28:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) [ 2209.953468][T23486] device batadv0 entered promiscuous mode [ 2209.961409][T23492] usb usb9: usbfs: process 23492 (syz-executor.4) did not claim interface 0 before use 13:28:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x7, 0x0}) 13:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x5, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2210.019770][T23486] device batadv0 left promiscuous mode 13:28:24 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3fa, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:24 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3f6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:24 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3f6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 13:28:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x8, 0x0}) [ 2210.112822][T23505] usb usb9: usbfs: process 23505 (syz-executor.4) did not claim interface 0 before use 13:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x6, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2210.195408][T23507] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2210.209647][T23510] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2210.280701][T23511] device batadv0 entered promiscuous mode [ 2210.304924][T23511] device batadv0 left promiscuous mode [ 2210.366529][T23512] device batadv0 entered promiscuous mode [ 2210.393499][T23512] device batadv0 left promiscuous mode 13:28:24 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3fe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 13:28:24 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3f6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2210.496568][T23518] device batadv0 entered promiscuous mode 13:28:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x9, 0x0}) [ 2210.541963][T23521] usb usb9: usbfs: process 23521 (syz-executor.4) did not claim interface 0 before use [ 2210.543245][T23518] device batadv0 left promiscuous mode 13:28:24 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3fa, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x7, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2210.754740][T23530] device batadv0 entered promiscuous mode [ 2210.779980][T23530] device batadv0 left promiscuous mode 13:28:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 2210.801920][T23531] usb usb9: usbfs: process 23531 (syz-executor.4) did not claim interface 0 before use 13:28:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xa, 0x0}) 13:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x8, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2210.888354][T23532] device batadv0 entered promiscuous mode [ 2210.928080][T23532] device batadv0 left promiscuous mode [ 2211.000822][T23537] device batadv0 entered promiscuous mode [ 2211.025157][T23537] device batadv0 left promiscuous mode 13:28:25 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3fe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:25 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:25 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3fe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xb, 0x0}) 13:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x9, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffffa7}, 0x0) [ 2211.100768][T23548] usb usb9: usbfs: process 23548 (syz-executor.4) did not claim interface 0 before use [ 2211.271701][T23556] device batadv0 entered promiscuous mode [ 2211.294554][T23556] device batadv0 left promiscuous mode 13:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0xa, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2211.372755][T23557] device batadv0 entered promiscuous mode [ 2211.411152][T23557] device batadv0 left promiscuous mode [ 2211.473922][T23559] device batadv0 entered promiscuous mode [ 2211.489659][T23559] device batadv0 left promiscuous mode [ 2211.498064][T23564] usb usb9: usbfs: process 23564 (syz-executor.4) did not claim interface 0 before use 13:28:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xc, 0x0}) 13:28:25 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x591, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:25 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 13:28:25 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3fa, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0xb, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2211.720758][T23577] usb usb9: usbfs: process 23577 (syz-executor.4) did not claim interface 0 before use 13:28:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xd, 0x0}) 13:28:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 2211.772492][T23580] device batadv0 entered promiscuous mode [ 2211.797088][T23580] device batadv0 left promiscuous mode [ 2211.866184][T23582] device batadv0 entered promiscuous mode [ 2211.895713][T23582] device batadv0 left promiscuous mode 13:28:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0xc, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2211.956144][T23583] device batadv0 entered promiscuous mode [ 2211.982643][T23583] device batadv0 left promiscuous mode 13:28:26 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x591, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:26 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x59f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:26 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xff09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 13:28:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xe, 0x0}) [ 2212.179981][T23596] usb usb9: usbfs: process 23596 (syz-executor.4) did not claim interface 0 before use 13:28:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0xd, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2212.294015][T23603] device batadv0 entered promiscuous mode [ 2212.316737][T23603] device batadv0 left promiscuous mode [ 2212.378355][T23604] device batadv0 entered promiscuous mode [ 2212.404437][T23604] device batadv0 left promiscuous mode [ 2212.483112][T23605] device batadv0 entered promiscuous mode [ 2212.512395][T23605] device batadv0 left promiscuous mode 13:28:26 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xff07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:26 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c4, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:26 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x59f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x2) 13:28:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x10, 0x0}) [ 2212.626960][T23612] usb usb9: usbfs: process 23612 (syz-executor.4) did not claim interface 0 before use 13:28:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0xe, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2212.794760][T23621] device batadv0 entered promiscuous mode [ 2212.818789][T23621] device batadv0 left promiscuous mode 13:28:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x3) 13:28:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x10, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2212.848153][T23631] usb usb9: usbfs: process 23631 (syz-executor.4) did not claim interface 0 before use 13:28:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x11, 0x0}) [ 2212.907085][T23622] device batadv0 entered promiscuous mode [ 2212.929821][T23622] device batadv0 left promiscuous mode 13:28:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x4) 13:28:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x11, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x12, 0x0}) [ 2212.990807][T23624] device batadv0 entered promiscuous mode [ 2213.012995][T23624] device batadv0 left promiscuous mode [ 2213.027259][T23639] usb usb9: usbfs: process 23639 (syz-executor.4) did not claim interface 0 before use 13:28:27 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x59f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:27 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c5, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:27 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c4, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x5) 13:28:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x12, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x25, 0x0}) [ 2213.179900][T23649] usb usb9: usbfs: process 23649 (syz-executor.4) did not claim interface 0 before use [ 2213.261850][T23654] device batadv0 entered promiscuous mode [ 2213.285521][T23654] device batadv0 left promiscuous mode 13:28:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x6) 13:28:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x1001, @empty=0xefffffff}]}]}, 0x38}}, 0x0) [ 2213.349716][T23655] device batadv0 entered promiscuous mode [ 2213.383586][T23655] device batadv0 left promiscuous mode [ 2213.450990][T23656] device batadv0 entered promiscuous mode [ 2213.470311][T23656] device batadv0 left promiscuous mode 13:28:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x48, 0x0}) [ 2213.494428][T23663] usb usb9: usbfs: process 23663 (syz-executor.4) did not claim interface 0 before use 13:28:27 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c4, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:27 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5d6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:27 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c5, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0xe800, @empty=0xefffffff}]}]}, 0x38}}, 0x0) 13:28:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x7) [ 2213.749825][T23676] device batadv0 entered promiscuous mode [ 2213.783911][T23676] device batadv0 left promiscuous mode [ 2213.842651][T23677] device batadv0 entered promiscuous mode [ 2213.864541][T23677] device batadv0 left promiscuous mode [ 2213.890690][T23678] usb usb9: usbfs: process 23678 (syz-executor.4) did not claim interface 0 before use 13:28:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x4c, 0x0}) 13:28:28 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2213.959171][T23679] device batadv0 entered promiscuous mode 13:28:28 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5d6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2214.009960][T23679] device batadv0 left promiscuous mode 13:28:28 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5d6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0xa}}, 0x0) 13:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x8) 13:28:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x60, 0x0}) [ 2214.205211][T23694] usb usb9: usbfs: process 23694 (syz-executor.4) did not claim interface 0 before use [ 2214.235629][T23692] device batadv0 entered promiscuous mode [ 2214.272020][T23692] device batadv0 left promiscuous mode 13:28:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0xf}}, 0x0) 13:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x9) [ 2214.329733][T23695] device batadv0 entered promiscuous mode [ 2214.345865][T23704] usb usb9: usbfs: process 23704 (syz-executor.4) did not claim interface 0 before use 13:28:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x68, 0x0}) [ 2214.385854][T23695] device batadv0 left promiscuous mode [ 2214.458163][T23698] device batadv0 entered promiscuous mode [ 2214.481888][T23698] device batadv0 left promiscuous mode 13:28:28 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c5, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:28 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2214.555494][T23692] device batadv0 entered promiscuous mode [ 2214.577826][T23692] device batadv0 left promiscuous mode 13:28:28 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xf) 13:28:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x10}}, 0x0) 13:28:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6c, 0x0}) [ 2214.714760][T23716] usb usb9: usbfs: process 23716 (syz-executor.4) did not claim interface 0 before use 13:28:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x14}}, 0x0) [ 2214.804422][T23718] device batadv0 entered promiscuous mode [ 2214.832274][T23718] device batadv0 left promiscuous mode 13:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x60) [ 2214.895697][T23717] device batadv0 entered promiscuous mode [ 2214.899154][T23725] usb usb9: usbfs: process 23725 (syz-executor.4) did not claim interface 0 before use 13:28:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x74, 0x0}) [ 2214.971146][T23717] device batadv0 left promiscuous mode 13:28:29 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0xc0}}, 0x0) [ 2215.035266][T23726] device batadv0 entered promiscuous mode [ 2215.060153][T23726] device batadv0 left promiscuous mode 13:28:29 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:29 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x204) [ 2215.252980][T23740] usb usb9: usbfs: process 23740 (syz-executor.4) did not claim interface 0 before use 13:28:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x7a, 0x0}) 13:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0xec0}}, 0x0) [ 2215.332102][T23744] device batadv0 entered promiscuous mode [ 2215.344062][T23745] MPTCP: kernel_bind error, err=-98 [ 2215.344797][T23746] MPTCP: kernel_bind error, err=-98 [ 2215.359249][T23744] device batadv0 left promiscuous mode [ 2215.428619][T23743] device batadv0 entered promiscuous mode [ 2215.452220][T23743] device batadv0 left promiscuous mode [ 2215.510782][T23747] device batadv0 entered promiscuous mode [ 2215.534662][T23747] device batadv0 left promiscuous mode 13:28:29 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x869, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:29 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:29 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x300) 13:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x33fe0}}, 0x0) 13:28:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x300, 0x0}) [ 2215.658316][T23755] usb usb9: usbfs: process 23755 (syz-executor.4) did not claim interface 0 before use [ 2215.661868][T23756] MPTCP: kernel_bind error, err=-98 13:28:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x402) [ 2215.673761][T23757] MPTCP: kernel_bind error, err=-98 [ 2215.827050][T23762] device batadv0 entered promiscuous mode [ 2215.857881][T23762] device batadv0 left promiscuous mode [ 2215.923118][T23763] device batadv0 entered promiscuous mode [ 2215.931310][T23769] usb usb9: usbfs: process 23769 (syz-executor.4) did not claim interface 0 before use [ 2215.942233][T23770] MPTCP: kernel_bind error, err=-98 13:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x20000078}}, 0x0) 13:28:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x500, 0x0}) 13:28:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x500) [ 2215.943193][T23772] MPTCP: kernel_bind error, err=-98 [ 2215.994676][T23763] device batadv0 left promiscuous mode [ 2216.064945][T23765] device batadv0 entered promiscuous mode [ 2216.092329][T23765] device batadv0 left promiscuous mode 13:28:30 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:30 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:30 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2216.215216][T23780] usb usb9: usbfs: process 23780 (syz-executor.4) did not claim interface 0 before use 13:28:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x200000f8}}, 0x0) 13:28:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x600, 0x0}) 13:28:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x600) [ 2216.339403][T23788] device batadv0 entered promiscuous mode [ 2216.363831][T23788] device batadv0 left promiscuous mode [ 2216.444453][T23790] device batadv0 entered promiscuous mode [ 2216.471901][T23790] device batadv0 left promiscuous mode 13:28:30 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2216.540699][T23795] device batadv0 entered promiscuous mode [ 2216.574961][T23795] device batadv0 left promiscuous mode 13:28:30 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x7ffff000}}, 0x0) 13:28:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x700) 13:28:30 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x700, 0x0}) [ 2216.635814][T23804] usb usb9: usbfs: process 23804 (syz-executor.4) did not claim interface 0 before use [ 2216.753037][T23807] device batadv0 entered promiscuous mode [ 2216.781049][T23807] device batadv0 left promiscuous mode [ 2216.885162][T23810] device batadv0 entered promiscuous mode [ 2216.910173][T23810] device batadv0 left promiscuous mode 13:28:30 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x900) 13:28:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0xfffffdef}}, 0x0) 13:28:31 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2217.003935][T23821] usb usb9: usbfs: process 23821 (syz-executor.4) did not claim interface 0 before use 13:28:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x900, 0x0}) [ 2217.073095][T23822] device batadv0 entered promiscuous mode [ 2217.099459][T23822] device batadv0 left promiscuous mode 13:28:31 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x2}, 0x0) 13:28:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xf00) [ 2217.303061][T23830] device batadv0 entered promiscuous mode [ 2217.332572][T23830] device batadv0 left promiscuous mode 13:28:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xa00, 0x0}) 13:28:31 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2217.411703][T23833] device batadv0 entered promiscuous mode [ 2217.434740][T23833] device batadv0 left promiscuous mode [ 2217.443943][T23835] usb usb9: usbfs: process 23835 (syz-executor.4) did not claim interface 0 before use [ 2217.547195][T23837] device batadv0 entered promiscuous mode [ 2217.565485][T23837] device batadv0 left promiscuous mode 13:28:31 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:31 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x1a23) [ 2217.697435][T23842] MPTCP: kernel_bind error, err=-98 13:28:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x3}, 0x0) 13:28:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xb00, 0x0}) [ 2217.697905][T23844] MPTCP: kernel_bind error, err=-98 [ 2217.730020][T23847] usb usb9: usbfs: process 23847 (syz-executor.4) did not claim interface 0 before use [ 2217.787523][T23848] device batadv0 entered promiscuous mode [ 2217.815113][T23848] device batadv0 left promiscuous mode 13:28:31 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2217.972482][T23852] device batadv0 entered promiscuous mode [ 2217.998433][T23852] device batadv0 left promiscuous mode 13:28:32 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2218.067045][T23853] device batadv0 entered promiscuous mode [ 2218.089995][T23853] device batadv0 left promiscuous mode 13:28:32 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x869, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x2000) [ 2218.213620][T23859] MPTCP: kernel_bind error, err=-98 [ 2218.216569][T23861] MPTCP: kernel_bind error, err=-98 [ 2218.230914][T23862] usb usb9: usbfs: process 23862 (syz-executor.4) did not claim interface 0 before use 13:28:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x5}, 0x0) 13:28:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xc00, 0x0}) [ 2218.308489][T23864] device batadv0 entered promiscuous mode [ 2218.332222][T23864] device batadv0 left promiscuous mode [ 2218.419209][T23867] device batadv0 entered promiscuous mode [ 2218.442923][T23867] device batadv0 left promiscuous mode 13:28:32 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1100, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2218.514272][T23868] device batadv0 entered promiscuous mode [ 2218.541883][T23868] device batadv0 left promiscuous mode 13:28:32 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:32 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x231a) 13:28:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x6}, 0x0) 13:28:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xd00, 0x0}) [ 2218.674896][T23877] MPTCP: kernel_bind error, err=-98 [ 2218.675391][T23878] MPTCP: kernel_bind error, err=-98 [ 2218.675657][T23876] usb usb9: usbfs: process 23876 (syz-executor.4) did not claim interface 0 before use [ 2218.826951][T23882] device batadv0 entered promiscuous mode [ 2218.851460][T23882] device batadv0 left promiscuous mode [ 2218.918452][T23883] device batadv0 entered promiscuous mode [ 2218.952717][T23883] device batadv0 left promiscuous mode [ 2219.023120][T23884] device batadv0 entered promiscuous mode [ 2219.047830][T23884] device batadv0 left promiscuous mode [ 2219.056000][T23888] MPTCP: kernel_bind error, err=-98 13:28:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x7}, 0x0) 13:28:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x6000) [ 2219.056570][T23889] MPTCP: kernel_bind error, err=-98 [ 2219.126071][T23894] usb usb9: usbfs: process 23894 (syz-executor.4) did not claim interface 0 before use 13:28:33 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:33 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1200, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:33 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x8}, 0x0) 13:28:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xe00, 0x0}) [ 2219.195257][T23897] MPTCP: kernel_bind error, err=-98 13:28:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xff0f) 13:28:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x1100, 0x0}) [ 2219.195783][T23898] MPTCP: kernel_bind error, err=-98 [ 2219.361679][T23905] device batadv0 entered promiscuous mode [ 2219.387236][T23909] usb usb9: usbfs: process 23909 (syz-executor.4) did not claim interface 0 before use [ 2219.397081][T23905] device batadv0 left promiscuous mode [ 2219.429357][T23911] MPTCP: kernel_bind error, err=-98 13:28:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x9}, 0x0) 13:28:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x30000) [ 2219.430120][T23912] MPTCP: kernel_bind error, err=-98 [ 2219.466394][T23906] device batadv0 entered promiscuous mode [ 2219.505873][T23906] device batadv0 left promiscuous mode [ 2219.579134][T23910] device batadv0 entered promiscuous mode [ 2219.610013][T23910] device batadv0 left promiscuous mode [ 2219.610248][T23917] usb usb9: usbfs: process 23917 (syz-executor.4) did not claim interface 0 before use 13:28:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x1200, 0x0}) 13:28:33 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1202, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:33 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2219.726828][T23919] device batadv0 entered promiscuous mode [ 2219.753043][T23919] device batadv0 left promiscuous mode 13:28:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x34000) 13:28:33 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1100, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2219.809624][T23925] MPTCP: kernel_bind error, err=-98 13:28:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0xa}, 0x0) 13:28:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x2000, 0x0}) [ 2219.809967][T23926] MPTCP: kernel_bind error, err=-98 [ 2219.882914][T23930] usb usb9: usbfs: process 23930 (syz-executor.4) did not claim interface 0 before use [ 2219.964575][T23931] device batadv0 entered promiscuous mode [ 2220.002922][T23931] device batadv0 left promiscuous mode [ 2220.061170][T23932] device batadv0 entered promiscuous mode [ 2220.083275][T23932] device batadv0 left promiscuous mode [ 2220.139006][T23941] MPTCP: kernel_bind error, err=-98 13:28:34 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1e03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x400300) [ 2220.139594][T23943] MPTCP: kernel_bind error, err=-98 [ 2220.201018][T23942] device batadv0 entered promiscuous mode 13:28:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x10}, 0x0) 13:28:34 executing program 0: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x43, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2220.270725][T23942] device batadv0 left promiscuous mode 13:28:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x2500, 0x0}) 13:28:34 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1200, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2220.322326][T23946] usb usb9: usbfs: process 23946 (syz-executor.4) did not claim interface 0 before use 13:28:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x1000000) 13:28:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1b}, 0x0) [ 2220.479680][T23952] device batadv0 entered promiscuous mode [ 2220.488292][T23954] MPTCP: kernel_bind error, err=-98 [ 2220.489016][T23960] MPTCP: kernel_bind error, err=-98 [ 2220.511454][T23961] usb usb9: usbfs: process 23961 (syz-executor.4) did not claim interface 0 before use 13:28:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x3f00, 0x0}) [ 2220.532195][T23952] device batadv0 left promiscuous mode [ 2220.621264][T23959] device batadv0 entered promiscuous mode [ 2220.647232][T23959] device batadv0 left promiscuous mode [ 2220.707266][T23953] device batadv0 entered promiscuous mode [ 2220.732414][T23953] device batadv0 left promiscuous mode 13:28:34 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1202, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2220.770314][T23964] device batadv0 entered promiscuous mode [ 2220.780690][T23964] device batadv0 left promiscuous mode 13:28:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x2000000) 13:28:34 executing program 0: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x43, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:34 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x25}, 0x0) [ 2220.835713][T23969] MPTCP: kernel_bind error, err=-98 13:28:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x4800, 0x0}) [ 2220.836389][T23970] MPTCP: kernel_bind error, err=-98 [ 2220.884116][T23973] usb usb9: usbfs: process 23973 (syz-executor.4) did not claim interface 0 before use 13:28:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x2040000) [ 2220.974509][T23974] device batadv0 entered promiscuous mode [ 2220.996027][T23974] device batadv0 left promiscuous mode 13:28:35 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1e03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x300}, 0x0) [ 2221.098027][T23984] MPTCP: kernel_bind error, err=-98 [ 2221.098774][T23985] MPTCP: kernel_bind error, err=-98 [ 2221.100459][T23981] device batadv0 entered promiscuous mode [ 2221.107516][T23986] usb usb9: usbfs: process 23986 (syz-executor.4) did not claim interface 0 before use [ 2221.141363][T23981] device batadv0 left promiscuous mode 13:28:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x4c00, 0x0}) [ 2221.242306][T23989] device batadv0 entered promiscuous mode [ 2221.271278][T23989] device batadv0 left promiscuous mode 13:28:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 1) 13:28:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x3000000) 13:28:35 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2100, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x7ffffff2}, 0x0) [ 2221.452172][T23996] device batadv0 entered promiscuous mode [ 2221.460793][T23998] MPTCP: kernel_bind error, err=-98 [ 2221.462685][T23997] usb usb9: usbfs: process 23997 (syz-executor.4) did not claim interface 0 before use [ 2221.477069][T23999] MPTCP: kernel_bind error, err=-98 [ 2221.479151][T23996] device batadv0 left promiscuous mode 13:28:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6000, 0x0}) [ 2221.570981][T24004] usb usb9: usbfs: process 24004 (syz-executor.0) did not claim interface 0 before use [ 2221.580730][T24004] FAULT_INJECTION: forcing a failure. [ 2221.580730][T24004] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.593409][T24004] CPU: 0 PID: 24004 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2221.603211][T24004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2221.613266][T24004] Call Trace: [ 2221.616543][T24004] [ 2221.619567][T24004] dump_stack_lvl+0xd6/0x122 [ 2221.624183][T24004] dump_stack+0x11/0x1b [ 2221.628342][T24004] should_fail+0x23c/0x250 [ 2221.632809][T24004] ? __kernfs_new_node+0x41/0x340 [ 2221.637912][T24004] __should_failslab+0x81/0x90 [ 2221.642682][T24004] should_failslab+0x5/0x20 [ 2221.647256][T24004] __kmalloc_track_caller+0x6d/0x370 [ 2221.652654][T24004] kstrdup_const+0x51/0x90 [ 2221.657137][T24004] __kernfs_new_node+0x41/0x340 [ 2221.662006][T24004] ? vprintk_emit+0x3a6/0x3c0 [ 2221.666695][T24004] kernfs_new_node+0x5b/0xd0 [ 2221.671296][T24004] kernfs_create_link+0x68/0x120 [ 2221.676559][T24004] sysfs_do_create_link_sd+0x6b/0xf0 [ 2221.681851][T24004] sysfs_create_link+0x4d/0x60 [ 2221.686621][T24004] driver_sysfs_add+0x8a/0x190 [ 2221.691468][T24004] device_bind_driver+0x14/0x90 [ 2221.696422][T24004] usb_driver_claim_interface+0x196/0x260 [ 2221.702150][T24004] claimintf+0x112/0x180 [ 2221.706404][T24004] usbdev_ioctl+0x39e4/0x3bb0 [ 2221.711090][T24004] ? selinux_file_ioctl+0x522/0x590 [ 2221.716323][T24004] ? do_vfs_ioctl+0x819/0x14a0 [ 2221.721096][T24004] ? usbdev_poll+0x120/0x120 [ 2221.725690][T24004] __se_sys_ioctl+0xcb/0x140 [ 2221.730321][T24004] __x64_sys_ioctl+0x3f/0x50 [ 2221.734977][T24004] do_syscall_64+0x44/0xd0 [ 2221.739483][T24004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2221.745476][T24004] RIP: 0033:0x7f21ec387ae9 [ 2221.749890][T24004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:28:35 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x7ffffff8}, 0x0) 13:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x7ffffff9}, 0x0) 13:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x7ffffffe}, 0x0) [ 2221.769556][T24004] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2221.778084][T24004] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 [ 2221.786061][T24004] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2221.794121][T24004] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.802097][T24004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2221.810171][T24004] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2221.818309][T24004] 13:28:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x4000000) 13:28:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 2) 13:28:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6800, 0x0}) [ 2221.862405][T24006] device batadv0 entered promiscuous mode 13:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x2}, 0x0) [ 2221.904610][T24006] device batadv0 left promiscuous mode 13:28:35 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2500, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2222.031943][T24028] usb usb9: usbfs: process 24028 (syz-executor.0) did not claim interface 0 before use [ 2222.041784][T24028] FAULT_INJECTION: forcing a failure. [ 2222.041784][T24028] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.054391][T24028] CPU: 0 PID: 24028 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2222.064276][T24028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2222.074326][T24028] Call Trace: [ 2222.077682][T24028] [ 2222.080604][T24028] dump_stack_lvl+0xd6/0x122 [ 2222.085609][T24028] dump_stack+0x11/0x1b [ 2222.089765][T24028] should_fail+0x23c/0x250 [ 2222.094180][T24028] ? __kernfs_new_node+0x6a/0x340 [ 2222.099233][T24028] __should_failslab+0x81/0x90 [ 2222.104022][T24028] should_failslab+0x5/0x20 [ 2222.108530][T24028] kmem_cache_alloc+0x4f/0x320 [ 2222.113297][T24028] __kernfs_new_node+0x6a/0x340 [ 2222.118206][T24028] ? vprintk_emit+0x3a6/0x3c0 [ 2222.122903][T24028] kernfs_new_node+0x5b/0xd0 [ 2222.127510][T24028] kernfs_create_link+0x68/0x120 [ 2222.132470][T24028] sysfs_do_create_link_sd+0x6b/0xf0 [ 2222.137778][T24028] sysfs_create_link+0x4d/0x60 [ 2222.142539][T24028] driver_sysfs_add+0x8a/0x190 [ 2222.147404][T24028] device_bind_driver+0x14/0x90 [ 2222.152335][T24028] usb_driver_claim_interface+0x196/0x260 [ 2222.158057][T24028] claimintf+0x112/0x180 [ 2222.162304][T24028] usbdev_ioctl+0x39e4/0x3bb0 [ 2222.167027][T24028] ? selinux_file_ioctl+0x522/0x590 [ 2222.172272][T24028] ? do_vfs_ioctl+0x819/0x14a0 [ 2222.177166][T24028] ? usbdev_poll+0x120/0x120 [ 2222.181790][T24028] __se_sys_ioctl+0xcb/0x140 [ 2222.186467][T24028] __x64_sys_ioctl+0x3f/0x50 [ 2222.191069][T24028] do_syscall_64+0x44/0xd0 [ 2222.195538][T24028] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2222.201439][T24028] RIP: 0033:0x7f21ec387ae9 [ 2222.205852][T24028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:28:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 3) [ 2222.225561][T24028] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2222.234393][T24028] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 [ 2222.242363][T24028] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2222.250391][T24028] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2222.258359][T24028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2222.266410][T24028] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2222.274409][T24028] 13:28:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x5000000) [ 2222.340128][T24029] device batadv0 entered promiscuous mode [ 2222.370947][T24029] device batadv0 left promiscuous mode 13:28:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6c00, 0x0}) 13:28:36 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2100, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2222.401691][T24032] usb usb9: usbfs: process 24032 (syz-executor.4) did not claim interface 0 before use 13:28:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x3}, 0x0) [ 2222.494977][T24036] MPTCP: kernel_bind error, err=-98 [ 2222.495536][T24037] MPTCP: kernel_bind error, err=-98 [ 2222.576206][T24038] device batadv0 entered promiscuous mode [ 2222.609776][T24038] device batadv0 left promiscuous mode 13:28:36 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2e03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2222.704538][T24047] usb usb9: usbfs: process 24047 (syz-executor.0) did not claim interface 0 before use [ 2222.714515][T24047] FAULT_INJECTION: forcing a failure. [ 2222.714515][T24047] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.727132][T24047] CPU: 1 PID: 24047 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2222.736945][T24047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2222.747145][T24047] Call Trace: [ 2222.750418][T24047] [ 2222.753362][T24047] dump_stack_lvl+0xd6/0x122 [ 2222.757965][T24047] dump_stack+0x11/0x1b [ 2222.762129][T24047] should_fail+0x23c/0x250 [ 2222.766637][T24047] ? radix_tree_node_alloc+0x142/0x200 [ 2222.772168][T24047] __should_failslab+0x81/0x90 [ 2222.776936][T24047] should_failslab+0x5/0x20 [ 2222.781476][T24047] kmem_cache_alloc+0x4f/0x320 [ 2222.786261][T24047] radix_tree_node_alloc+0x142/0x200 [ 2222.791656][T24047] idr_get_free+0x22a/0x5d0 [ 2222.796193][T24047] idr_alloc_cyclic+0xf4/0x2f0 [ 2222.800969][T24047] __kernfs_new_node+0xb4/0x340 [ 2222.805928][T24047] ? vprintk_emit+0x3a6/0x3c0 [ 2222.810602][T24047] kernfs_new_node+0x5b/0xd0 [ 2222.815292][T24047] kernfs_create_link+0x68/0x120 [ 2222.820233][T24047] sysfs_do_create_link_sd+0x6b/0xf0 [ 2222.825541][T24047] sysfs_create_link+0x4d/0x60 [ 2222.830322][T24047] driver_sysfs_add+0x8a/0x190 [ 2222.835132][T24047] device_bind_driver+0x14/0x90 [ 2222.840079][T24047] usb_driver_claim_interface+0x196/0x260 [ 2222.845857][T24047] claimintf+0x112/0x180 [ 2222.850104][T24047] usbdev_ioctl+0x39e4/0x3bb0 [ 2222.854785][T24047] ? selinux_file_ioctl+0x522/0x590 [ 2222.860211][T24047] ? do_vfs_ioctl+0x819/0x14a0 [ 2222.865015][T24047] ? usbdev_poll+0x120/0x120 [ 2222.869736][T24047] __se_sys_ioctl+0xcb/0x140 [ 2222.874325][T24047] __x64_sys_ioctl+0x3f/0x50 [ 2222.878944][T24047] do_syscall_64+0x44/0xd0 [ 2222.883369][T24047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2222.889262][T24047] RIP: 0033:0x7f21ec387ae9 [ 2222.893707][T24047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2222.913308][T24047] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2222.921824][T24047] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 [ 2222.929830][T24047] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2222.937803][T24047] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2222.945767][T24047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:28:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 4) 13:28:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x6000000) 13:28:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x7400, 0x0}) [ 2222.953756][T24047] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2222.961820][T24047] [ 2222.971469][T24050] usb usb9: usbfs: process 24050 (syz-executor.4) did not claim interface 0 before use [ 2223.094449][T24052] device batadv0 entered promiscuous mode [ 2223.123103][T24052] device batadv0 left promiscuous mode 13:28:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4}, 0x0) [ 2223.154764][T24053] MPTCP: kernel_bind error, err=-98 13:28:37 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2500, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2223.155222][T24054] MPTCP: kernel_bind error, err=-98 [ 2223.287536][T24058] device batadv0 entered promiscuous mode [ 2223.306064][T24061] usb usb9: usbfs: process 24061 (syz-executor.0) did not claim interface 0 before use [ 2223.315919][T24061] FAULT_INJECTION: forcing a failure. [ 2223.315919][T24061] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.328523][T24061] CPU: 1 PID: 24061 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2223.338321][T24061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2223.348447][T24061] Call Trace: [ 2223.351718][T24061] [ 2223.354640][T24061] dump_stack_lvl+0xd6/0x122 [ 2223.359259][T24061] dump_stack+0x11/0x1b [ 2223.363414][T24061] should_fail+0x23c/0x250 [ 2223.367828][T24061] ? usb_control_msg+0x55/0x240 [ 2223.372823][T24061] __should_failslab+0x81/0x90 [ 2223.377631][T24061] should_failslab+0x5/0x20 [ 2223.382157][T24061] kmem_cache_alloc_trace+0x52/0x350 [ 2223.387460][T24061] ? driver_bound+0x30e/0x340 [ 2223.392247][T24061] usb_control_msg+0x55/0x240 [ 2223.397072][T24061] usb_clear_halt+0x5d/0xe0 [ 2223.401585][T24061] usbdev_ioctl+0x3787/0x3bb0 [ 2223.406286][T24061] ? selinux_file_ioctl+0x522/0x590 [ 2223.411537][T24061] ? do_vfs_ioctl+0x819/0x14a0 [ 2223.416474][T24061] ? usbdev_poll+0x120/0x120 [ 2223.421142][T24061] __se_sys_ioctl+0xcb/0x140 [ 2223.425739][T24061] __x64_sys_ioctl+0x3f/0x50 [ 2223.430330][T24061] do_syscall_64+0x44/0xd0 [ 2223.434761][T24061] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2223.440706][T24061] RIP: 0033:0x7f21ec387ae9 [ 2223.445282][T24061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2223.464892][T24061] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2223.473306][T24061] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 13:28:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 5) [ 2223.481279][T24061] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2223.489284][T24061] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2223.497274][T24061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2223.505410][T24061] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2223.513379][T24061] [ 2223.517714][T24058] device batadv0 left promiscuous mode 13:28:37 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x7000000) 13:28:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x7a00, 0x0}) [ 2223.602972][T24064] usb usb9: usbfs: process 24064 (syz-executor.4) did not claim interface 0 before use 13:28:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x5}, 0x0) [ 2223.675240][T24067] MPTCP: kernel_bind error, err=-98 [ 2223.675698][T24069] MPTCP: kernel_bind error, err=-98 [ 2223.770133][T24070] device batadv0 entered promiscuous mode [ 2223.799996][T24070] device batadv0 left promiscuous mode 13:28:37 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2e03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2223.883702][T24074] usb usb9: usbfs: process 24074 (syz-executor.0) did not claim interface 0 before use [ 2223.893440][T24074] FAULT_INJECTION: forcing a failure. [ 2223.893440][T24074] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.906155][T24074] CPU: 0 PID: 24074 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2223.916148][T24074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2223.926213][T24074] Call Trace: [ 2223.929488][T24074] [ 2223.932448][T24074] dump_stack_lvl+0xd6/0x122 [ 2223.937139][T24074] dump_stack+0x11/0x1b [ 2223.941342][T24074] should_fail+0x23c/0x250 [ 2223.945838][T24074] ? __kernfs_new_node+0x6a/0x340 [ 2223.951123][T24074] __should_failslab+0x81/0x90 [ 2223.953756][T24079] MPTCP: kernel_bind error, err=-98 [ 2223.956003][T24074] should_failslab+0x5/0x20 [ 2223.965715][T24074] kmem_cache_alloc+0x4f/0x320 [ 2223.970481][T24074] ? __down_write_common+0x42/0x860 [ 2223.975797][T24074] __kernfs_new_node+0x6a/0x340 [ 2223.980658][T24074] ? vprintk_emit+0x3a6/0x3c0 [ 2223.985410][T24074] ? up_write+0x25/0xc0 [ 2223.989650][T24074] kernfs_new_node+0x5b/0xd0 [ 2223.994321][T24074] kernfs_create_link+0x68/0x120 [ 2223.999265][T24074] sysfs_do_create_link_sd+0x6b/0xf0 [ 2224.004549][T24074] sysfs_create_link+0x4d/0x60 [ 2224.009355][T24074] driver_sysfs_add+0xce/0x190 [ 2224.014142][T24074] device_bind_driver+0x14/0x90 [ 2224.019038][T24074] usb_driver_claim_interface+0x196/0x260 [ 2224.024755][T24074] claimintf+0x112/0x180 [ 2224.028996][T24074] usbdev_ioctl+0x39e4/0x3bb0 [ 2224.033709][T24074] ? selinux_file_ioctl+0x522/0x590 [ 2224.038957][T24074] ? do_vfs_ioctl+0x819/0x14a0 [ 2224.043732][T24074] ? usbdev_poll+0x120/0x120 [ 2224.048321][T24074] __se_sys_ioctl+0xcb/0x140 [ 2224.052913][T24074] __x64_sys_ioctl+0x3f/0x50 [ 2224.057516][T24074] do_syscall_64+0x44/0xd0 [ 2224.062013][T24074] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2224.067906][T24074] RIP: 0033:0x7f21ec387ae9 [ 2224.072342][T24074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2224.092125][T24074] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2224.100605][T24074] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 [ 2224.108708][T24074] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2224.116739][T24074] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2224.124706][T24074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:28:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6}, 0x0) 13:28:38 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 6) [ 2224.132761][T24074] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2224.140735][T24074] [ 2224.172445][T24077] device batadv0 entered promiscuous mode [ 2224.214894][T24077] device batadv0 left promiscuous mode [ 2224.242429][T24084] usb usb9: usbfs: process 24084 (syz-executor.4) did not claim interface 0 before use 13:28:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x8000000) 13:28:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x20000, 0x0}) 13:28:38 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3401, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2224.299577][T24082] device batadv0 entered promiscuous mode [ 2224.322353][T24082] device batadv0 left promiscuous mode [ 2224.397309][T24082] device batadv0 entered promiscuous mode [ 2224.406093][T24082] device batadv0 left promiscuous mode 13:28:38 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7}, 0x0) [ 2224.473631][T24091] MPTCP: kernel_bind error, err=-98 [ 2224.474101][T24092] MPTCP: kernel_bind error, err=-98 [ 2224.525709][T24096] usb usb9: usbfs: process 24096 (syz-executor.0) did not claim interface 0 before use [ 2224.540778][T24096] FAULT_INJECTION: forcing a failure. [ 2224.540778][T24096] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.553458][T24096] CPU: 0 PID: 24096 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2224.563277][T24096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2224.573329][T24096] Call Trace: [ 2224.576701][T24096] [ 2224.579678][T24096] dump_stack_lvl+0xd6/0x122 [ 2224.584325][T24096] dump_stack+0x11/0x1b [ 2224.588557][T24096] should_fail+0x23c/0x250 [ 2224.592993][T24096] ? usb_control_msg+0x55/0x240 [ 2224.597923][T24096] __should_failslab+0x81/0x90 [ 2224.602794][T24096] should_failslab+0x5/0x20 [ 2224.607302][T24096] kmem_cache_alloc_trace+0x52/0x350 [ 2224.612639][T24096] ? driver_bound+0x30e/0x340 [ 2224.617341][T24096] usb_control_msg+0x55/0x240 [ 2224.622031][T24096] usb_clear_halt+0x5d/0xe0 [ 2224.626541][T24096] usbdev_ioctl+0x3787/0x3bb0 [ 2224.631275][T24096] ? selinux_file_ioctl+0x522/0x590 [ 2224.636497][T24096] ? do_vfs_ioctl+0x819/0x14a0 [ 2224.641285][T24096] ? usbdev_poll+0x120/0x120 [ 2224.645939][T24096] __se_sys_ioctl+0xcb/0x140 [ 2224.650527][T24096] __x64_sys_ioctl+0x3f/0x50 [ 2224.655266][T24096] do_syscall_64+0x44/0xd0 [ 2224.659749][T24096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2224.665687][T24096] RIP: 0033:0x7f21ec387ae9 [ 2224.670094][T24096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2224.689798][T24096] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2224.698217][T24096] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 [ 2224.706299][T24096] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2224.714264][T24096] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 13:28:38 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 7) 13:28:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x9000000) 13:28:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x1000000, 0x0}) [ 2224.722344][T24096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2224.730317][T24096] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2224.738309][T24096] [ 2224.755208][T24098] usb usb9: usbfs: process 24098 (syz-executor.4) did not claim interface 0 before use [ 2224.842112][T24101] device batadv0 entered promiscuous mode [ 2224.869778][T24101] device batadv0 left promiscuous mode 13:28:38 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2225.022054][T24105] device batadv0 entered promiscuous mode [ 2225.046386][T24105] device batadv0 left promiscuous mode 13:28:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x8}, 0x0) [ 2225.074568][T24106] MPTCP: kernel_bind error, err=-98 13:28:39 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3401, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2225.074960][T24107] MPTCP: kernel_bind error, err=-98 [ 2225.148875][T24112] usb usb9: usbfs: process 24112 (syz-executor.0) did not claim interface 0 before use [ 2225.163803][T24112] FAULT_INJECTION: forcing a failure. [ 2225.163803][T24112] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.176496][T24112] CPU: 0 PID: 24112 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2225.186290][T24112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2225.196338][T24112] Call Trace: [ 2225.199609][T24112] [ 2225.202532][T24112] dump_stack_lvl+0xd6/0x122 [ 2225.207148][T24112] dump_stack+0x11/0x1b [ 2225.211323][T24112] should_fail+0x23c/0x250 [ 2225.215743][T24112] ? usb_alloc_urb+0x34/0xb0 [ 2225.220410][T24112] __should_failslab+0x81/0x90 [ 2225.225169][T24112] should_failslab+0x5/0x20 [ 2225.229703][T24112] __kmalloc+0x6f/0x370 [ 2225.234039][T24112] ? kmem_cache_alloc_trace+0x24b/0x350 [ 2225.239606][T24112] usb_alloc_urb+0x34/0xb0 [ 2225.244034][T24112] usb_control_msg+0xce/0x240 [ 2225.248725][T24112] usb_clear_halt+0x5d/0xe0 [ 2225.253289][T24112] usbdev_ioctl+0x3787/0x3bb0 [ 2225.258010][T24112] ? selinux_file_ioctl+0x522/0x590 [ 2225.263210][T24112] ? do_vfs_ioctl+0x819/0x14a0 [ 2225.267986][T24112] ? usbdev_poll+0x120/0x120 [ 2225.272653][T24112] __se_sys_ioctl+0xcb/0x140 [ 2225.277321][T24112] __x64_sys_ioctl+0x3f/0x50 [ 2225.281985][T24112] do_syscall_64+0x44/0xd0 [ 2225.286466][T24112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2225.292365][T24112] RIP: 0033:0x7f21ec387ae9 [ 2225.296790][T24112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.316516][T24112] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2225.324932][T24112] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 [ 2225.332910][T24112] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2225.340973][T24112] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.348946][T24112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2225.357058][T24112] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2225.365087][T24112] 13:28:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 8) [ 2225.390623][T24113] usb usb9: usbfs: process 24113 (syz-executor.4) did not claim interface 0 before use 13:28:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xf000000) 13:28:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x2000000, 0x0}) [ 2225.465024][T24117] device batadv0 entered promiscuous mode [ 2225.511425][T24117] device batadv0 left promiscuous mode 13:28:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x9}, 0x0) [ 2225.552018][T24120] MPTCP: kernel_bind error, err=-98 13:28:39 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3f00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2225.552642][T24121] MPTCP: kernel_bind error, err=-98 [ 2225.621528][T24122] device batadv0 entered promiscuous mode [ 2225.650575][T24122] device batadv0 left promiscuous mode [ 2225.675852][T24125] usb usb9: usbfs: process 24125 (syz-executor.0) did not claim interface 0 before use [ 2225.685615][T24125] FAULT_INJECTION: forcing a failure. [ 2225.685615][T24125] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.698262][T24125] CPU: 1 PID: 24125 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2225.708066][T24125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2225.718230][T24125] Call Trace: [ 2225.721498][T24125] [ 2225.724441][T24125] dump_stack_lvl+0xd6/0x122 [ 2225.729043][T24125] dump_stack+0x11/0x1b [ 2225.733191][T24125] should_fail+0x23c/0x250 [ 2225.737606][T24125] ? kzalloc+0x16/0x20 [ 2225.741787][T24125] __should_failslab+0x81/0x90 [ 2225.746552][T24125] should_failslab+0x5/0x20 [ 2225.751078][T24125] __kmalloc+0x6f/0x370 [ 2225.755229][T24125] ? enqueue_entity+0x4bf/0x6c0 [ 2225.760077][T24125] kzalloc+0x16/0x20 [ 2225.763995][T24125] usb_hcd_submit_urb+0x61d/0x13d0 [ 2225.769170][T24125] ? __this_cpu_preempt_check+0x18/0x20 [ 2225.774723][T24125] ? probe_sched_wakeup+0x75/0x90 [ 2225.779750][T24125] ? __rcu_read_unlock+0x5c/0x290 [ 2225.784838][T24125] ? try_to_wake_up+0x3cd/0x540 [ 2225.789685][T24125] ? __down_read_common+0x161/0x4b0 [ 2225.794954][T24125] usb_submit_urb+0xc1e/0xcd0 [ 2225.799639][T24125] usb_start_wait_urb+0x91/0x190 [ 2225.804643][T24125] usb_control_msg+0x17e/0x240 [ 2225.809452][T24125] usb_clear_halt+0x5d/0xe0 [ 2225.813979][T24125] usbdev_ioctl+0x3787/0x3bb0 [ 2225.818665][T24125] ? selinux_file_ioctl+0x522/0x590 [ 2225.823870][T24125] ? do_vfs_ioctl+0x819/0x14a0 [ 2225.828654][T24125] ? usbdev_poll+0x120/0x120 [ 2225.833278][T24125] __se_sys_ioctl+0xcb/0x140 [ 2225.837911][T24125] __x64_sys_ioctl+0x3f/0x50 [ 2225.842503][T24125] do_syscall_64+0x44/0xd0 [ 2225.846919][T24125] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2225.852835][T24125] RIP: 0033:0x7f21ec387ae9 [ 2225.857315][T24125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.877141][T24125] RSP: 002b:00007f21ea0fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2225.885607][T24125] RAX: ffffffffffffffda RBX: 00007f21ec49af60 RCX: 00007f21ec387ae9 [ 2225.893573][T24125] RDX: 0000000020000040 RSI: 0000000080045515 RDI: 0000000000000003 [ 2225.901544][T24125] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.909565][T24125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2225.917534][T24125] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 13:28:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (fail_nth: 9) [ 2225.925508][T24125] 13:28:39 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x1a230000) 13:28:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x3000000, 0x0}) [ 2226.079851][T24131] usb usb9: usbfs: process 24131 (syz-executor.4) did not claim interface 0 before use 13:28:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xa}, 0x0) [ 2226.154022][T24135] MPTCP: kernel_bind error, err=-98 [ 2226.154551][T24137] MPTCP: kernel_bind error, err=-98 [ 2226.191081][T24136] device batadv0 entered promiscuous mode [ 2226.225801][T24136] device batadv0 left promiscuous mode [ 2226.262414][T24140] usb usb9: usbfs: process 24140 (syz-executor.0) did not claim interface 0 before use [ 2226.272698][T24140] FAULT_INJECTION: forcing a failure. [ 2226.272698][T24140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2226.285772][T24140] CPU: 0 PID: 24140 Comm: syz-executor.0 Tainted: G W 5.15.0-syzkaller #0 [ 2226.295580][T24140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2226.305683][T24140] Call Trace: [ 2226.308975][T24140] [ 2226.311899][T24140] dump_stack_lvl+0xd6/0x122 [ 2226.316550][T24140] dump_stack+0x11/0x1b [ 2226.320722][T24140] should_fail+0x23c/0x250 [ 2226.325179][T24140] should_fail_usercopy+0x16/0x20 [ 2226.330268][T24140] _copy_to_user+0x1c/0x90 [ 2226.334710][T24140] simple_read_from_buffer+0xab/0x120 [ 2226.340200][T24140] proc_fail_nth_read+0x10d/0x150 [ 2226.345276][T24140] ? proc_fault_inject_write+0x230/0x230 [ 2226.350915][T24140] vfs_read+0x1e6/0x750 [ 2226.355066][T24140] ? __fget_light+0x219/0x260 [ 2226.359758][T24140] ksys_read+0xd9/0x190 [ 2226.363919][T24140] __x64_sys_read+0x3e/0x50 [ 2226.368457][T24140] do_syscall_64+0x44/0xd0 [ 2226.372891][T24140] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2226.378800][T24140] RIP: 0033:0x7f21ec33a69c [ 2226.383210][T24140] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2226.402844][T24140] RSP: 002b:00007f21ea0fe170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2226.411271][T24140] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21ec33a69c 13:28:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x20000000) [ 2226.419323][T24140] RDX: 000000000000000f RSI: 00007f21ea0fe1e0 RDI: 0000000000000004 [ 2226.427314][T24140] RBP: 00007f21ea0fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2226.435275][T24140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2226.443243][T24140] R13: 00007ffe2a09b20f R14: 00007f21ea0fe300 R15: 0000000000022000 [ 2226.451219][T24140] [ 2226.493475][T24145] device batadv0 entered promiscuous mode 13:28:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:40 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2226.537952][T24145] device batadv0 left promiscuous mode [ 2226.593913][T24148] MPTCP: kernel_bind error, err=-98 13:28:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xb}, 0x0) 13:28:40 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3f00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x4000000, 0x0}) [ 2226.594385][T24149] MPTCP: kernel_bind error, err=-98 [ 2226.628298][T24150] usb usb9: usbfs: process 24150 (syz-executor.4) did not claim interface 0 before use 13:28:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x60000000) 13:28:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x2, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2226.776666][T24158] usb usb9: usbfs: process 24158 (syz-executor.0) did not claim interface 0 before use [ 2226.788000][T24159] device batadv0 entered promiscuous mode [ 2226.812858][T24159] device batadv0 left promiscuous mode [ 2226.858218][T24160] MPTCP: kernel_bind error, err=-98 13:28:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xc}, 0x0) [ 2226.862469][T24161] MPTCP: kernel_bind error, err=-98 [ 2226.911174][T24163] device batadv0 entered promiscuous mode [ 2226.924897][T24164] usb usb9: usbfs: process 24164 (syz-executor.4) did not claim interface 0 before use 13:28:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4b47, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x5000000, 0x0}) [ 2226.954321][T24163] device batadv0 left promiscuous mode 13:28:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x9effffff) 13:28:41 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:41 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4203, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2227.044127][T24173] MPTCP: kernel_bind error, err=-98 13:28:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xd}, 0x0) 13:28:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4b49, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6000000, 0x0}) [ 2227.046446][T24174] MPTCP: kernel_bind error, err=-98 [ 2227.136064][T24179] usb usb9: usbfs: process 24179 (syz-executor.4) did not claim interface 0 before use 13:28:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xa7ffffff) [ 2227.246596][T24185] device batadv0 entered promiscuous mode [ 2227.274085][T24185] device batadv0 left promiscuous mode [ 2227.338740][T24186] device batadv0 entered promiscuous mode [ 2227.349288][T24188] MPTCP: kernel_bind error, err=-98 [ 2227.363567][T24186] device batadv0 left promiscuous mode [ 2227.363904][T24190] MPTCP: kernel_bind error, err=-98 13:28:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xe}, 0x0) [ 2227.379372][T24191] usb usb9: usbfs: process 24191 (syz-executor.4) did not claim interface 0 before use 13:28:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x7000000, 0x0}) 13:28:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x541b, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:41 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x419f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:41 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4788, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xefffffff) [ 2227.533068][T24202] MPTCP: kernel_bind error, err=-98 13:28:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xf}, 0x0) 13:28:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5421, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x8000000, 0x0}) [ 2227.533598][T24203] MPTCP: kernel_bind error, err=-98 [ 2227.570471][T24206] usb usb9: usbfs: process 24206 (syz-executor.4) did not claim interface 0 before use [ 2227.658401][T24207] device batadv0 entered promiscuous mode [ 2227.683521][T24207] device batadv0 left promiscuous mode 13:28:41 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4203, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2227.783863][T24211] device batadv0 entered promiscuous mode [ 2227.817694][T24211] device batadv0 left promiscuous mode 13:28:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5450, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x10}, 0x0) 13:28:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xf0ffffff) 13:28:41 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4800, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x9000000, 0x0}) [ 2227.924940][T24220] MPTCP: kernel_bind error, err=-98 [ 2227.925383][T24221] MPTCP: kernel_bind error, err=-98 [ 2227.936263][T24222] usb usb9: usbfs: process 24222 (syz-executor.4) did not claim interface 0 before use [ 2228.032791][T24224] device batadv0 entered promiscuous mode [ 2228.057806][T24224] device batadv0 left promiscuous mode 13:28:42 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4264, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2228.223249][T24231] MPTCP: kernel_bind error, err=-98 [ 2228.223839][T24233] MPTCP: kernel_bind error, err=-98 [ 2228.248481][T24237] usb usb9: usbfs: process 24237 (syz-executor.4) did not claim interface 0 before use 13:28:42 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5451, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xfeffffff) 13:28:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x11}, 0x0) 13:28:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xa000000, 0x0}) [ 2228.300004][T24235] device batadv0 entered promiscuous mode [ 2228.356125][T24235] device batadv0 left promiscuous mode [ 2228.426178][T24239] device batadv0 entered promiscuous mode [ 2228.453074][T24239] device batadv0 left promiscuous mode 13:28:42 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4803, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:42 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4788, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:42 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5452, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2228.633955][T24250] MPTCP: kernel_bind error, err=-98 13:28:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xff0f0000) 13:28:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x12}, 0x0) [ 2228.634510][T24251] MPTCP: kernel_bind error, err=-98 [ 2228.656681][T24254] usb usb9: usbfs: process 24254 (syz-executor.4) did not claim interface 0 before use 13:28:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xb000000, 0x0}) 13:28:42 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5460, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2228.737290][T24258] device batadv0 entered promiscuous mode [ 2228.760449][T24258] device batadv0 left promiscuous mode [ 2228.839231][T24260] device batadv0 entered promiscuous mode [ 2228.868165][T24260] device batadv0 left promiscuous mode 13:28:42 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4888, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:42 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4800, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xffffff7f) [ 2229.009662][T24268] MPTCP: kernel_bind error, err=-98 13:28:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x25}, 0x0) 13:28:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x550b, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xc000000, 0x0}) [ 2229.010066][T24269] MPTCP: kernel_bind error, err=-98 [ 2229.035697][T24270] usb usb9: usbfs: process 24270 (syz-executor.4) did not claim interface 0 before use [ 2229.140019][T24275] device batadv0 entered promiscuous mode [ 2229.163158][T24275] device batadv0 left promiscuous mode 13:28:43 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4a00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2229.278337][T24277] device batadv0 entered promiscuous mode [ 2229.305214][T24277] device batadv0 left promiscuous mode 13:28:43 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4888, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xffffff9e) 13:28:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5514, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2229.391027][T24285] MPTCP: kernel_bind error, err=-98 13:28:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x48}, 0x0) 13:28:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xd000000, 0x0}) [ 2229.391576][T24287] MPTCP: kernel_bind error, err=-98 [ 2229.418338][T24288] usb usb9: usbfs: process 24288 (syz-executor.4) did not claim interface 0 before use 13:28:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xffffffa7) [ 2229.550830][T24292] device batadv0 entered promiscuous mode [ 2229.583528][T24292] device batadv0 left promiscuous mode [ 2229.607970][T24299] MPTCP: kernel_bind error, err=-98 [ 2229.608791][T24300] MPTCP: kernel_bind error, err=-98 [ 2229.617842][T24302] usb usb9: usbfs: process 24302 (syz-executor.4) did not claim interface 0 before use 13:28:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xffffffef) 13:28:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4c}, 0x0) 13:28:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x551f, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xe000000, 0x0}) 13:28:43 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2229.683324][T24301] device batadv0 entered promiscuous mode [ 2229.708820][T24301] device batadv0 left promiscuous mode 13:28:43 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4a00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xfffffff0) 13:28:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x60}, 0x0) [ 2229.801524][T24313] MPTCP: kernel_bind error, err=-98 13:28:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5521, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x10000000, 0x0}) [ 2229.802307][T24314] MPTCP: kernel_bind error, err=-98 [ 2229.863796][T24319] usb usb9: usbfs: process 24319 (syz-executor.4) did not claim interface 0 before use [ 2229.936920][T24320] device batadv0 entered promiscuous mode [ 2229.973737][T24320] device batadv0 left promiscuous mode 13:28:44 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5865, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xfffffffe) [ 2230.108603][T24330] device batadv0 entered promiscuous mode [ 2230.143642][T24330] device batadv0 left promiscuous mode 13:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x68}, 0x0) [ 2230.188797][T24332] MPTCP: kernel_bind error, err=-98 13:28:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5522, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:44 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x11000000, 0x0}) [ 2230.189284][T24333] MPTCP: kernel_bind error, err=-98 [ 2230.242302][T24337] usb usb9: usbfs: process 24337 (syz-executor.4) did not claim interface 0 before use 13:28:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x3000000000000) [ 2230.363233][T24342] device batadv0 entered promiscuous mode [ 2230.395794][T24342] device batadv0 left promiscuous mode 13:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6c}, 0x0) [ 2230.458915][T24346] MPTCP: kernel_bind error, err=-98 13:28:44 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5a03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x5523, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2230.459321][T24347] MPTCP: kernel_bind error, err=-98 [ 2230.535945][T24350] device batadv0 entered promiscuous mode [ 2230.567680][T24350] device batadv0 left promiscuous mode 13:28:44 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5865, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x12000000, 0x0}) [ 2230.629358][T24352] usb usb9: usbfs: process 24352 (syz-executor.4) did not claim interface 0 before use 13:28:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x40030000000000) [ 2230.756607][T24360] MPTCP: kernel_bind error, err=-98 13:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x74}, 0x0) 13:28:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4004550c, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2230.757179][T24361] MPTCP: kernel_bind error, err=-98 [ 2230.815442][T24363] device batadv0 entered promiscuous mode [ 2230.863212][T24363] device batadv0 left promiscuous mode [ 2230.950477][T24366] device batadv0 entered promiscuous mode [ 2230.975718][T24366] device batadv0 left promiscuous mode 13:28:45 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5ac2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2231.012110][T24369] usb usb9: usbfs: process 24369 (syz-executor.4) did not claim interface 0 before use 13:28:45 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x20000000, 0x0}) 13:28:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x100000000000000) 13:28:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7a}, 0x0) [ 2231.100525][T24378] MPTCP: kernel_bind error, err=-98 [ 2231.101188][T24379] MPTCP: kernel_bind error, err=-98 [ 2231.219831][T24384] usb usb9: usbfs: process 24384 (syz-executor.4) did not claim interface 0 before use 13:28:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x200000000000000) [ 2231.271378][T24385] device batadv0 entered promiscuous mode 13:28:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x25000000, 0x0}) 13:28:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x300}, 0x0) [ 2231.312848][T24385] device batadv0 left promiscuous mode [ 2231.316848][T24391] MPTCP: kernel_bind error, err=-98 [ 2231.321959][T24392] MPTCP: kernel_bind error, err=-98 [ 2231.390576][T24386] device batadv0 entered promiscuous mode [ 2231.422620][T24386] device batadv0 left promiscuous mode 13:28:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x204000000000000) 13:28:45 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5c00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:45 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2231.594832][T24400] usb usb9: usbfs: process 24400 (syz-executor.4) did not claim interface 0 before use [ 2231.615700][T24403] MPTCP: kernel_bind error, err=-98 [ 2231.616201][T24404] MPTCP: kernel_bind error, err=-98 [ 2231.705880][T24408] device batadv0 entered promiscuous mode [ 2231.733634][T24408] device batadv0 left promiscuous mode [ 2231.797678][T24409] device batadv0 entered promiscuous mode [ 2231.825235][T24409] device batadv0 left promiscuous mode 13:28:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x300000000000000) 13:28:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4004550d, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x500}, 0x0) 13:28:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x3f000000, 0x0}) 13:28:45 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6442, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:45 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x48000000, 0x0}) [ 2232.008976][T24519] usb usb9: usbfs: process 24519 (syz-executor.4) did not claim interface 0 before use [ 2232.034577][T24522] MPTCP: kernel_bind error, err=-98 13:28:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x400000000000000) 13:28:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x600}, 0x0) [ 2232.035229][T24523] MPTCP: kernel_bind error, err=-98 [ 2232.101292][T24525] device batadv0 entered promiscuous mode [ 2232.132744][T24525] device batadv0 left promiscuous mode [ 2232.208935][T24526] device batadv0 entered promiscuous mode [ 2232.234894][T24526] device batadv0 left promiscuous mode 13:28:46 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6558, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:46 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6558, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4004551e, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x4c000000, 0x0}) 13:28:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x500000000000000) [ 2232.374132][T24534] usb usb9: usbfs: process 24534 (syz-executor.4) did not claim interface 0 before use [ 2232.402617][T24535] MPTCP: kernel_bind error, err=-98 13:28:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x700}, 0x0) [ 2232.403118][T24537] MPTCP: kernel_bind error, err=-98 [ 2232.491125][T24541] device batadv0 entered promiscuous mode [ 2232.526958][T24541] device batadv0 left promiscuous mode 13:28:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x40049409, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2232.593019][T24548] usb usb9: usbfs: process 24548 (syz-executor.4) did not claim interface 0 before use [ 2232.598206][T24543] device batadv0 entered promiscuous mode 13:28:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x60000000, 0x0}) [ 2232.633900][T24543] device batadv0 left promiscuous mode 13:28:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x600000000000000) 13:28:46 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6800, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:46 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6602, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2232.675614][T24552] MPTCP: kernel_bind error, err=-98 13:28:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x900}, 0x0) 13:28:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4008550c, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x68000000, 0x0}) 13:28:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x700000000000000) [ 2232.676163][T24553] MPTCP: kernel_bind error, err=-98 [ 2232.791829][T24559] usb usb9: usbfs: process 24559 (syz-executor.4) did not claim interface 0 before use 13:28:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xa00}, 0x0) [ 2232.908199][T24565] device batadv0 entered promiscuous mode [ 2232.935269][T24565] device batadv0 left promiscuous mode [ 2232.943485][T24566] MPTCP: kernel_bind error, err=-98 [ 2232.944259][T24567] MPTCP: kernel_bind error, err=-98 [ 2233.006482][T24568] device batadv0 entered promiscuous mode [ 2233.038248][T24568] device batadv0 left promiscuous mode 13:28:47 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6908, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:47 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6800, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x6c000000, 0x0}) [ 2233.186491][T24576] usb usb9: usbfs: process 24576 (syz-executor.4) did not claim interface 0 before use 13:28:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x800000000000000) 13:28:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xb00}, 0x0) [ 2233.237094][T24580] MPTCP: kernel_bind error, err=-98 13:28:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x74000000, 0x0}) [ 2233.237635][T24581] MPTCP: kernel_bind error, err=-98 [ 2233.307784][T24585] device batadv0 entered promiscuous mode [ 2233.319536][T24587] usb usb9: usbfs: process 24587 (syz-executor.4) did not claim interface 0 before use [ 2233.342899][T24585] device batadv0 left promiscuous mode 13:28:47 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6c00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2233.418747][T24584] device batadv0 entered promiscuous mode [ 2233.444568][T24584] device batadv0 left promiscuous mode 13:28:47 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6c00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2233.605009][T24597] MPTCP: kernel_bind error, err=-98 [ 2233.605577][T24598] MPTCP: kernel_bind error, err=-98 [ 2233.638379][T24600] usb usb9: usbfs: process 24600 (syz-executor.4) did not claim interface 0 before use [ 2233.715134][T24602] device batadv0 entered promiscuous mode [ 2233.747406][T24602] device batadv0 left promiscuous mode [ 2233.822012][T24603] device batadv0 entered promiscuous mode [ 2233.846102][T24603] device batadv0 left promiscuous mode 13:28:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4008550d, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x900000000000000) 13:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xc00}, 0x0) 13:28:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x7a000000, 0x0}) 13:28:48 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7400, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:48 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7400, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2234.075939][T24713] usb usb9: usbfs: process 24713 (syz-executor.4) did not claim interface 0 before use [ 2234.098990][T24717] MPTCP: kernel_bind error, err=-98 13:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xd00}, 0x0) 13:28:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xf00000000000000) 13:28:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xfdfdffff, 0x0}) 13:28:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x40085511, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2234.099714][T24719] MPTCP: kernel_bind error, err=-98 [ 2234.143344][T24715] device batadv0 entered promiscuous mode [ 2234.183901][T24715] device batadv0 left promiscuous mode [ 2234.212482][T24722] device batadv0 entered promiscuous mode [ 2234.221664][T24722] device batadv0 left promiscuous mode [ 2234.247975][T24724] MPTCP: kernel_bind error, err=-98 13:28:48 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7a00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2234.248919][T24725] MPTCP: kernel_bind error, err=-98 [ 2234.278898][T24731] usb usb9: usbfs: process 24731 (syz-executor.4) did not claim interface 0 before use 13:28:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xfffffdfd, 0x0}) 13:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xe00}, 0x0) 13:28:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x1a23000000000000) 13:28:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x40086602, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2234.326212][T24716] device batadv0 entered promiscuous mode [ 2234.361543][T24716] device batadv0 left promiscuous mode 13:28:48 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7a00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2234.551537][T24740] usb usb9: usbfs: process 24740 (syz-executor.4) did not claim interface 0 before use [ 2234.567315][T24743] MPTCP: kernel_bind error, err=-98 13:28:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x2000000000000000) [ 2234.567739][T24745] MPTCP: kernel_bind error, err=-98 [ 2234.621789][T24742] device batadv0 entered promiscuous mode 13:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xf00}, 0x0) 13:28:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x40087602, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xffffff7f, 0x0}) [ 2234.675875][T24742] device batadv0 left promiscuous mode [ 2234.734248][T24746] device batadv0 entered promiscuous mode [ 2234.766763][T24746] device batadv0 left promiscuous mode 13:28:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x401c5820, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x6000000000000000) 13:28:48 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8003, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2234.801373][T24756] usb usb9: usbfs: process 24756 (syz-executor.4) did not claim interface 0 before use 13:28:48 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8003, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x73, 0x281) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="6f3d1bd1490000a17390680981b86585de97d6d099362cee06ededb942bb1831a22112ae996aca1adcafe59bc7a741e438afa9fb8482e8302000ffc58a773e9b6b28435cc32ada797e76f3bec44170bc5044230839170bb671c32c4ab928a41c6e7fc8a83e58cc7d103aece79e52e97dae5dd23a434cae7fb0c4e3d94de0cfdd926a1f1eb00c78c1c822", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x60, 0x5f7}, 0x100, './file0\x00'}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x4}) 13:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x1100}, 0x0) [ 2234.801440][T24755] MPTCP: kernel_bind error, err=-98 13:28:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x4020940d, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x8000000000000000) [ 2234.849293][T24755] MPTCP: kernel_bind error, err=-98 [ 2235.058163][T24767] device batadv0 entered promiscuous mode [ 2235.091629][T24767] device batadv0 left promiscuous mode [ 2235.121516][T24769] 9pnet: Insufficient options for proto=fd [ 2235.127684][T24769] usb usb5: usbfs: process 24769 (syz-executor.4) did not claim interface 0 before use 13:28:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x1200}, 0x0) 13:28:49 executing program 4: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x3ed, 0x300, 0x70bd2b, 0x25dfdbff, "fb4026ffb9bbe4824d6a1b7a1b1bca5484f2de5b33d966af5a6595de91b35e1da329ed8c3e07688c3c491cd749be2ffb0efd52185b3f790b9a4a4fc7b7605285374705c548d7ae9d1503809b71b73bd6ea8c7151673335987bbab665", ["", ""]}, 0x6c}}, 0x4004000) [ 2235.175147][T24770] device batadv0 entered promiscuous mode [ 2235.183270][T24771] MPTCP: kernel_bind error, err=-98 [ 2235.183671][T24773] 9pnet: Insufficient options for proto=fd 13:28:49 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8100, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2235.195592][T24774] MPTCP: kernel_bind error, err=-98 [ 2235.225078][T24770] device batadv0 left promiscuous mode 13:28:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x41045508, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:49 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8100, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x9effffff00000000) [ 2235.410431][T24786] MPTCP: kernel_bind error, err=-98 [ 2235.411151][T24787] MPTCP: kernel_bind error, err=-98 [ 2235.416885][T24788] usb usb9: usbfs: process 24788 (syz-executor.4) did not claim interface 0 before use 13:28:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x2000}, 0x0) 13:28:49 executing program 4: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRES64=0x0], 0x265) syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r1, r0, 0x0, 0x100000001) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xffffffff, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0x1c, 0x0, 0x81, 0x3f, 0x0, 0x8b, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x4}, 0x10002, 0x0, 0x1, 0x5, 0x7, 0x1, 0xdc6, 0x0, 0xfa, 0x0, 0x9}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000080)={&(0x7f0000000580)=""/237, 0xed, 0x101, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = socket$kcm(0x29, 0xc31365ff442331c4, 0x0) sendfile(r4, r3, 0x0, 0x100000001) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0x2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r5, 0x1d, 0x1, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) [ 2235.480593][T24789] device batadv0 entered promiscuous mode [ 2235.517428][T24789] device batadv0 left promiscuous mode 13:28:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xa7ffffff00000000) 13:28:49 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8401, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2235.613242][T24793] device batadv0 entered promiscuous mode [ 2235.638211][T24793] device batadv0 left promiscuous mode 13:28:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x2500}, 0x0) [ 2235.703676][T24800] MPTCP: kernel_bind error, err=-98 13:28:49 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8401, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x12, 0xef37, 0xfffa, 0x3d, 0x1f, &(0x7f0000000000)="db17e5dab5329276107664cf9165fa8dc992e58e036ac9aef01a3e4ac04c70b1f916028e6e11250b9fee415f7c5d62618a21cec99f0e9eef8c6c954c9a"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x60, 0x3, 0x8e9, 0x800, 0x56, 0x0, &(0x7f0000000100)="c861aa3db360f596c5c6437b83f5a2cca7efe938455f82d291ac9d930735cffd28ec4969fca772071840085d51a08fbfe55fdfbbb48339e525a01a508a9719fd2d5eeb1bad650d26687adeca96802d26c56178eff463"}) 13:28:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xefffffff00000000) 13:28:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045505, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2235.704328][T24801] MPTCP: kernel_bind error, err=-98 [ 2235.838368][T24811] usb usb9: usbfs: process 24811 (syz-executor.0) did not claim interface 0 before use [ 2235.925666][T24814] device batadv0 entered promiscuous mode [ 2235.947982][T24814] device batadv0 left promiscuous mode 13:28:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xf0ffffff00000000) [ 2236.022827][T24815] device batadv0 entered promiscuous mode [ 2236.031593][T24818] MPTCP: kernel_bind error, err=-98 [ 2236.045529][T24823] MPTCP: kernel_bind error, err=-98 [ 2236.052034][T24820] vhci_hcd: invalid port number 250 [ 2236.062999][T24820] vhci_hcd: default hub control req: 6012 vef37 i00fa l61 13:28:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4800}, 0x0) [ 2236.083156][T24815] device batadv0 left promiscuous mode [ 2236.108583][T24820] usb usb9: usbfs: process 24820 (syz-executor.4) did not claim interface 0 before use [ 2236.118794][T24824] usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.0' sets config #129 13:28:50 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8403, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2236.131161][T24820] vhci_hcd: invalid port number 250 [ 2236.136412][T24820] vhci_hcd: default hub control req: 6012 vef37 i00fa l61 [ 2236.144553][T24825] usb usb9: usbfs: process 24825 (syz-executor.4) did not claim interface 0 before use 13:28:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8004550f, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:50 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8403, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xfeffffff00000000) 13:28:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0xff}) 13:28:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4c00}, 0x0) [ 2236.229386][T24832] MPTCP: kernel_bind error, err=-98 13:28:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045510, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xff0f000000000000) [ 2236.229832][T24833] MPTCP: kernel_bind error, err=-98 [ 2236.354866][T24839] device batadv0 entered promiscuous mode [ 2236.385312][T24839] device batadv0 left promiscuous mode [ 2236.471328][T24843] device batadv0 entered promiscuous mode [ 2236.495838][T24845] MPTCP: kernel_bind error, err=-98 [ 2236.496261][T24847] MPTCP: kernel_bind error, err=-98 [ 2236.498200][T24846] usb usb9: usbfs: process 24846 (syz-executor.4) did not claim interface 0 before use 13:28:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x506f}, 0x0) 13:28:50 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8847, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9000000}, 0x8) [ 2236.529595][T24843] device batadv0 left promiscuous mode [ 2236.546838][T24846] usb usb9: usbfs: process 24846 (syz-executor.4) did not claim interface 0 before use 13:28:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045518, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2236.625910][T24854] MPTCP: kernel_bind error, err=-98 13:28:50 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8847, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6000}, 0x0) 13:28:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xffffff7f00000000) 13:28:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045519, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2236.626981][T24855] MPTCP: kernel_bind error, err=-98 [ 2236.763426][T24861] device batadv0 entered promiscuous mode [ 2236.779258][T24865] MPTCP: kernel_bind error, err=-98 13:28:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6800}, 0x0) [ 2236.780905][T24866] MPTCP: kernel_bind error, err=-98 [ 2236.805754][T24867] usb usb9: usbfs: process 24867 (syz-executor.4) did not claim interface 0 before use [ 2236.832386][T24861] device batadv0 left promiscuous mode [ 2236.841468][T24867] usb usb9: usbfs: process 24867 (syz-executor.4) did not claim interface 0 before use 13:28:50 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x64ce94c3, 0x7, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc0, 0x0, &(0x7f0000000580)=[@decrefs={0x40046307, 0x2}, @acquire={0x40046305, 0x1}, @release={0x40046306, 0x1}, @free_buffer, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/72, 0x48, 0x1, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/27, 0x1b, 0x2, 0x29}, @fd}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fd, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x0, 0x29}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0xda, 0x0, &(0x7f0000000640)="dee06d9c5bf02eacb954cbacad0ea09fb5a71f3fe43dfa214172fe4fd9a7b57dd3792b0d8e157a7715b1a7c98ef1cc83c1a38add070d786af4b68feb09dbae741a57255c37c8f0168f9e697a97e259c7288304f54183276f21b08acea06db48c549b49a5ee568db3ca4cb1371899255974512abce687a7fb488e8f6d2970d7f6055494119411d8954f830bbac1abae89d638e3266c7ad8bb0c98cdd31279a16d9987023f2ab5e2d8ba42314be99907617f69db75ee30add6277323d2a79ffb9d9ae623d8b80499ddd577314b7c8891d265732e69d145e62212cd"}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x44241) ioctl$USBDEVFS_BULK(r2, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$FIOCLEX(r2, 0x5451) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x1, 0x5, 0x1c7, 0x3, 0x2a1, 0xffffffff, &(0x7f0000000a80)="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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r5, r4, 0x0, 0x100000001) sendfile(r5, r2, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000000)=0x3) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000480), &(0x7f0000000500), 0x2, 0x1) 13:28:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0xffffffff00000000) 13:28:50 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8848, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2236.955712][T24874] device batadv0 entered promiscuous mode 13:28:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8004551a, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2237.005877][T24874] device batadv0 left promiscuous mode 13:28:51 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8848, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6c00}, 0x0) [ 2237.071746][T24880] MPTCP: kernel_bind error, err=-98 13:28:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x2, 0x0}) 13:28:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 13:28:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80085504, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2237.072195][T24881] MPTCP: kernel_bind error, err=-98 [ 2237.200463][T24888] device batadv0 entered promiscuous mode [ 2237.239164][T24888] device batadv0 left promiscuous mode 13:28:51 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8a03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2237.344554][T24895] device batadv0 entered promiscuous mode [ 2237.372176][T24895] device batadv0 left promiscuous mode [ 2237.423977][T24897] MPTCP: kernel_bind error, err=-98 13:28:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6f50}, 0x0) 13:28:51 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8a03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010076db61a5000018000000", @ANYRES32=r0, @ANYBLOB="07000000000000006e2f66698b6530001e7fa9d4804871895cf308b945873d0da5037c17786844a13778c409293ad056c63ee154efc92a7b423ed1b26f254a2976b0f7ea1fe359ef3175a07fca700e07c0a4e67c640fb26aae4639f594744a7be99b41767d535f462dfe041d8e40f0a2ca55f5fc88bf67b5d68d804f9a51957d06a1de7d9cb72afa48ae995f3843d3e3694ddb"]) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x8000805) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2237.424406][T24898] MPTCP: kernel_bind error, err=-98 [ 2237.448779][T24903] usb usb9: usbfs: process 24903 (syz-executor.4) did not claim interface 0 before use 13:28:51 executing program 4: keyctl$session_to_parent(0x12) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0xffffffff, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080)) 13:28:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8008550e, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2237.642341][T24910] device batadv0 entered promiscuous mode [ 2237.667932][T24910] device batadv0 left promiscuous mode [ 2237.738357][T24915] MPTCP: kernel_bind error, err=-98 13:28:51 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9105, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7400}, 0x0) [ 2237.739079][T24916] MPTCP: kernel_bind error, err=-98 [ 2237.788160][T24917] device batadv0 entered promiscuous mode [ 2237.825263][T24917] device batadv0 left promiscuous mode 13:28:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r1, 0x2, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc323a5086d75e84d}, 0x0) [ 2237.846288][T24920] usb usb9: usbfs: process 24920 (syz-executor.4) did not claim interface 0 before use 13:28:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x80, 0x5, 0x9, 0x0, 0xf8, 0x3, &(0x7f0000000240)="6c2b9a6f85cb9b7dd14354860daf309e0d6c821d13a2e1c7da36d7f95fb9c3f8c04da92c624cce836cbdd2bdb011abb90158b0a90b04e231cc062b4ad5daa1b0329a1974bcb1ef7bd10f2bc4c251114dff4e2145000472257b56fefef3bea7e25167a1e241493c1dcad61416b6e09aa66d3db1074a98b241d1bdfc823c39e6a4bdb928c2d575544e50c44409d34347130a6c371ec2df46c2f793e8fb0494260d3e243b3a669ec798983f000a9d099c83612d74518f3c3bd345b9167284b25715e064ce8bbb50901a425caa37f8a2fd79ab5bd81e5387eaa0734d318e2e723dfdcea7a28aa2da39f272843c7833c77ef6ab550a39dad31fc8"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0xfffffffc, 0x0}) r1 = timerfd_create(0x8, 0x800) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000000)={0x1, 0x3, 0xf7, &(0x7f0000000100)=""/247}) open(&(0x7f0000000200)='./file0\x00', 0x30d002, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:28:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8008551c, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:51 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9105, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7a00}, 0x0) [ 2238.027876][T24928] device batadv0 entered promiscuous mode [ 2238.048066][T24929] MPTCP: kernel_bind error, err=-98 [ 2238.055493][T24928] device batadv0 left promiscuous mode 13:28:52 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9201, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8008551d, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2238.069554][T24930] MPTCP: kernel_bind error, err=-98 [ 2238.150490][T24936] vhci_hcd: default hub control req: 8005 v0009 i0000 l248 13:28:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38800000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x888c4251}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="0c180000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900090000001d0000000800a500000000001000a6800a00060008021100000100000800a500000000000800a500010000006400a6800a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000005800a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a00060008021100000000001c00a6800a00060008021100000100000a00060008021100000000000800a500000000003400a6800a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a000600080211000000000008007e000200000008000d0002000000300291008bf61114274206ae34cb6d453963b32206cc207eaedfb1bb13fcc7088e945f4574291273de92f965bdeb1f59e7bb870cd8a25fe732cacd12746204d0a937e51414b4e4c31d0f67a63007d818b76a70d7fa32128f06fe83bf3ed9b853ec5654e796dcf68e5079a989398499b9714a32bb94729cd932dd852b59c3fc7173aa346d7cf1a5f2706e396a6deddd928a9eb4b684fb9d6e4e186b76d439baa6d6255f62c73660810410988f8847dd4229e3be2dcd5d20b1ef7aa90780265f041b60b1a84a052cade4644983252227604dc3e6b15127290ebbaa0a1e058231ff64189b31a03a8b8b2c348d5662bba189ad1434fd7660f62bc37420711d4df722008f9a84c5bb13ba455f8667d14121ee4a72d8333e08b55d125d218322f351652d009a0561f8fef55b79ed287a02083c9277347ec73725436186e1d79029d26edd67e04c149d26d0a70e6641a321d3bd9ec665239edd20c74cd5d87f1bc262bf855bd88a55c4e33dbd5c21174262797f749c0ff5ad784f94b26cc7fbb91ba753fafb2a67fcfdfb9226fce15ed436fb7b11ff81dbad3c929de17845bc5758ccf4d327c89102d5204801442cc9ece9555f8c987212e2a68fef0baaf02df7cb18a8aa746a2a0901aa81d20b210255ac6015a415922664a1342468fb72f133b9a8a886c3563f846adbefe4b378a2fa2ebd9f33cc9723f8c2065850d7528758fb3536bd639e6224235a744c0c8e90fa94e808467e8de76a4dc52d3b274f39b5a5efcd8c7ed3fe3913cb638e75dbdae853ca7b1a030f00bd06ffffffffffffddbe850321f0a96ecad7877c75347988bae0ecd0f527a444572cd4127ec1015c9fe1dadf5050820068f01ab0f1480952830d4a88079b23387dde567643921c6e1735130a6a0814d4e2841fc0ec2d27abd185e6d9758f0e810702095ce42d5cf30f56c1d807a4b2f613958f91ffb0ad481f75c43070845f44ffc2c31565274785046ba2a53d42b6e18008eed935df68b43429b1908589f3dc30fe9ca5dbdd5f57377ac6521dd3c0d9830e170a93a593a265dfde114b32463b7ada3b21d829084f72060303030303032d1a02001c0000000000000000010007000b00000008030100008081056a082981e7ccc42188c47022fbce9ac35a34a7f8cf0e03a52bd6a5009cee349cbd3ddfd7546b9e0c0a9792371b46fd7f4953a9bc45034db3088362afb94852f7efce1ca0302d8c3bc335b2789596a56b1719b272b0584c8585c73b3826f0f5df37ce5487a7522283689d467e150f3f090802110000010100000000020000060000003c0401090800827840070705000000080211000001f9ffffff08021100000187da00000400000008000802110000010100000001ffffffffffffcc130000010802110000010600000004ffffffffffffff7f000001ffffffffffff0300000001080211000001ffffff7f0108021100000117000000040802110000010500000037250508d408346363f8629e089312c440c2132ecbca396f919b9db05138253987c04af7ee6e6b95931db696c8bae9f2018c204e94f5e99778e4b8667f25e7d643c24a5a55bc3d4f23eda92f666358d190921683021bad4094ea39c8b104eb82c8ef2b6fd0c40483433f484825fd8e8abe021f4f050ae454f07a36cbc77bc2eed5672b5a5664d21843e4af7d1929892a83740227c30e01d339dde0ea5946e14d041b55319c1b13c96556a78c95e61c561b4e59cd49ba80cfdd4a40010a65d5d354d4cefce77437021158cd6a2318ce461752259a962d5f6c038a041b73db7b010371679e8d75ae93aeb2745ed06c3ced7a36684579282d041c3cf2bb1f9d167f654f110de0e1cfa8c07eb76e01572a9c0f0e7b5ed1041078874add9f0f9d32ad5837e5380719fd00004a020e0080186d00080211000001ffffffffffff50505050505000fc000000000000000064000081000258460108038403b68b24040403014804060000ff03090005170c5c05a0efa2b58f38b670918e8785b20a2fffa42ffd71250300b0682a01062d1a02001a14a9ffffffffffffff004000010000000004ff000000407107ff0100ff006128ddb6abf6675c3c07478e646b957d7e282e8ac5fa4d18140f7644eb81f70af457725f0e9dcec5a5f90500bbed4e89e556e856787cfb0d5ca3d9885fd49ed8d8a4c62c049b00fbd0c3849d0528c44690399e07e021a1766f138a0cab970245ef3c6bc03aa9a2d3af8bb6cef3d08c79a3daa29c877ce34ebdeb5d8bcbb2fd99b38feba67c28cfd573cea2636aa80d3afa53b8a06b409002ad381b71c39cfed292653efa3096035a70c1d6099fc59c0217a310b5a565b7257ee9dd4d36b77af218a5c1b4affe8c160ed726915db72206e1a25c23a2b266ff23e1fc33cdad555b2ae67f01c375b913f3460ba963a2d4369d09c3ab58efbade3fad7f703a990e89dfdb13a17d3e7cd509ddbacba21dcbf97fe5e0d58b9be20502f38fd981b65825786f0bc344cf3af8943cb685f3759bc74b4adc9ea350c40b32c2731fe6092952b19c65df6ce6571e5334cb2186cc1637b3a0809772b19bd39109162d8b9e1b4db5ded5295866ac7df3aa9fde40610ca2e533bbab7accdcc9d26da93894ba502c7b923f3d0b1b052e7deb12506407c9b3341aa4eeffaf4659267f60a4d8e42f8e585e40df3e3dee2b6e05e059d9c6df8233abae890f26cbc58b79c04dd041ff31502292b72f00000a017f0003013006db224de324bedcac090f0e48a4323352a195620474bc817385b828cf2a254efe880395523ad49a1f935b2793b9fe7db7965b080a6fc85a06be5c8b5a91521b023194e6c09533497c00b752524165952c97b6d40884e53d110cff9443717a97f57cb7337dd5406349a2a9b468aa83b01d8cd6eb3c1a40a7de6b4186d05e761a96b081cb5cd5f0303d16abc85f96e7f4aeb8e261f675abab09c749d87ad822426c7622c2df2c97e934b87f02f4d089701fc6e2ca8d5af7c179113883f30e3a4a68bfdeb6ddbfb1283dab8fdf38b5a5ead072cbf72ca825eb691ecd9638250300b00910011e7516000008001d00e1de2dd085b78c31f8d7ffc2b07a89343c0401209d40000073040e0080940400080211000001ffffffffffffcb955078b307070004000240ff0f00000000000040004000001f042e3fb8e33e1cf27d650b5f78651f0c84fc03c9de9273d9342bf9a53dad410301b9060203002d1a02001c2000000000000000040001001000000000045d000000047206030303030303710701000101ff2108ddb5c05264c2a9ba54e5bcae7e16fdb17c98a8f50d3f265e3e52d4ea6645c524d1b90d8d49a1e67a689e2584866e318f72f40eb38ae8d20eca4e1a8d88c35ad60d076e03c3822a5dd6126e34988835b8c969af2db06c74624391660b1635bf7e54206c2d5193335fed12d122536fe8722f8494ea3dbfc647c3d60e6804fb49b9043c8a4f8e4f848ea445c025ee24506ee111fc2a6ddc4e8889eee41c521249357957184f238a4347601350ead22e6cbbe376a7ba1f3641dd76c1f22f80f70b47ce34f5fc90a1d3af75c39c43125fc91d433cb9da7ac4b33f3306cc19ca2219485c3378b1ed65188a152d485faa7ca4b1a52a396325d98c2c541cddd9157a112ed1f82210e774eddd09d12a31d71e9a536b7e8505bd28d83a14a51bbbb32ed3882e5b4b06db3797823af35ba4ec86ebdd1472ab88ab765a9aaf2e3ffe8c7de5c352b1c800dddde39e934090998c12a74362825988129181fb32f7756aadce634f5b9a102d0ea0d2efa16172ac72cd86deb38179e1d052ddb17fbeaf9760802cbc2a7be6f3e8ca998ac93ef5cb3f1b086bca08728da18021aacb84668a707a650d00f34c6ec262be1addc190bf8b366523db240c5dbe68029b63fd542db33a22eb07ea7f0569fea0c1c6c63dd92bce4d8508a067f27a1db1a108c01a0a3b0dc8af2438d99494d079bc8abc578101205ffccaadbe0310aa96307ef45f992cedd0bc6964b5a0dce528c4665527db538d702dbf71df275637504301403c5f0016caec175699d3c1028bf4679f9d2c8599f0f3dda7ea5e116f11a95f5ff00aa23303543b9f4c3024bbfc99d3216567ee0c1c1f3487774523bf9d81a9060d478a51106854f031d3f9a7242c13ddf74e2f7948f427e64577595d9bc06f6c6075bc55e626967e2cdb14285468f34a6e776138eeef3f0a548ee046124ef4bd36e527138d99ccd8478a0b2e4c33cf63b3ee554354b91f53d92a93be6c67aeb154c8c93013800f14aba392756f586b4bd03a25eed2e6c75d37cf0d28c6b0c7dd6708c6c110f6de68599d145724f596c0ddd7902c1188eb4d09f21d0087611d82b5960f9c058dfb5938af1f54f0056324fa8003ad6125472b4796045e060e6f459d45bcf025cbb9ae5c4b34e0e5d4f0b2229c59dd4be073dd107bdc05b91adfd13352b2ba16a27e73dd0b5c77c2ea751d5202dd80f9dd396a88e0d526ff758245c722963062586f6733a6116e8710df72bb282f02a75bb058ff644d044ef19c69eb2c77c7af14a1c26038d357f2a754d0dd6c12fe9d044dbfb1ffdf4ee41da6a1367b6d24cda740a847f015cf1dd57867a32625df808aec8e87d54560e4ae214cb9be67edb728862dcf9a754f8443692aa2c0f3dd9a8a5614ee5028be2882b9e39e69464889f3f9880eb9999263cbd747bc8c5012e7d423a686e5c576b76b00b4008000831f00e05cffffffffffff0200000006000000000200000802110000012000000037780002073365ec9cd360f2a2542a5d74e787edb3b5994deb598dbd0e093c17c3de6fe8848160886d80a69c476b423599c82b9ffd025302f27387947658b990c0ab34e74ece8826aa5fd27ec9d6695e3b4d660401170e2611d40a973348fc4987d4b67d0b5e2fc2bf4a598521020b69f067dd29f1f62217a7262503002401760604f30500ff03bd06080211000001d3030e00801c0000080211000001080211000001080211000001482b02000000000000000600420006025e3a05bb049881a0ef9d5a14963771fc8e8f3d7487c3ac6700a949a8918961e15f2ffe35fea5439f99bfe399524d24b404c4a09009d700f0248087aab3f2a6e6e43a410781e4bc64263d477417e102d0e6e96e4ccc82a8654f4b6555b06951d6994aa0207f8596c7fb9a4d5af1cd5b54d1240def9778070289634fb8d29f73070a79975ebeeaa5d918ff54e00890b84f2771bef44532ad2a95a2dbbc6237dc24066e63aa5c307eb5dc2cf12340014142171181fcecd394a5f0f2828b0667e5250300ad072d1a00081000010000000000002b00810001000000010008fc0000ec7206030303030303dddea40bb44a03a6baadeaec55571af06074f1fb79541b82f46e32341b98efdb546d3d4a213447848cdac072b96b6bced439024e0296b7a88b49327c75c839d51d81d899ba6f21e1d14986eb147d59f43d66002dace836cd81a808d14358e09b49efbe30667674b76fbb9fdf60fc7b56278d2ef7b26a5858c8c1669fe451c7e8cca1e651e0a0ed5c25246b31a9f43a72f30fea3ccc79c17aa25e1a5f559a3b26fa5b65424fef9a475f2b69d20ad5002817992ce67b4620a9a6eb45b9796884c26eec8bb1bc0a412a0e453e2a7a35d752469a561b595640131705a0829088ddd7506c2e3a75eaf1194b2e084a77632cc52367383bda1eec27e2c18bdf938f51eda29cb41bf6e2205c09206bb64511008f5425cd1928c3ab55a3dffa9fd702f2de11cbf23873f1f24107985ede50d20693250e2ce77c48debbfdd74e01f6dff29280a103f84c3f4932ec2b92ac73fd377a612171599d08732ff5fe8bb0b40d62cc3d5725ae3393e9c0288fed0b845f617f0553e46daeea8c99718b85c8ce4947d8d0f37e4317bf08c21a9800e98471466d6369e2eb2dfade2981783d55b7e4d2ebfa11749f1c31941a156625d8ecf8fa119f347e42a4d0a3ddee9144c8c9455ac4c3c288560383e183104c27dc13e0f2eca168ddad2d812b4f88563cfc32c425da40460ddce1477bfd2829031bcf43d91977f288a13068f5dbcfe21a338826936a065e08ab41ea7933a97e92be67e4a614a4fe2368908d871d4a496b0514dcde20d0172ca3da31aee530f7456c7ad8faff9d43c71382e1f366389974f2f557e1269342732433ed3953eae7b1bce603e7bced6782f971fc3b26645b7260d6a2422fac2418134af25f844d187c1129ff5e459172a8a3a2c68aef5caa86fb5fb3cfbd4f7518b432776759e344f0349d1d81db1ff614fbc04b52f4960dc8225a8fc846fc23510c0fcb28dd16baaeac2139ec28bd5cd5e9b33d22e7a97db88742eacf004a000f002a01067508000007000101400072060303030303030105830cec0b8903010a832540137f080211000001ed030000080211000001f9ffffff7f0000000802110000010700000000000f007f0003016c7606070833007f0000d7007f0005d108756cd9ddea36f26193ee743ea7e43bd0262f9e23df17435344f2377e874381c55ad5f0eab856c05a803ec1273b1d41c811785e9011d7f0f0bfaadccc10f22ddc1a07473eb33d4adf43f5b1eafdc0a9d707f7c1c708ff8decea71e6dd480b7a0f363242ecbb2aae03a933d51ed5d6ea2f495a20e583b729f163709a0cba3569bc3a5368d3be9e6cb2c6c1a80df0f2a28160b6648381d8d9a8ac366ae70b14fefaf773c2729aa30e37e5beed5b1c83c1b1077c34b77b49064eb531ef5e786bdc4fac6a80a05ab579e81bfb77fd0488b5990004004600060096000400000015007f00760636052c00090071070101ffff0109000000009f030e0080800000ffffffffffff0802110000018d90e9c597b379000e000bc0010000000100000001000880010283010602010005fb0939806378ae5a26d7bca31139bd7175034c90cf46534a7b9b608709b7f6e6afab8cf8028cc5683215243f770fd875c3f1ec971e1a44bdec87b72de9d17f67348626b2e405a9aab888ce9b4cab2b2c783c3cf06c811fc72029a099aef67a915c94e8c72a8156dba9b67b7e05be5f0602625cac29abe22042fb30353371d89af6bbe9531077856ce87472efef8069c7afcda52d856bcbe9f67a6abf1b7592acb2f801703e3f6fbaedc06dd788aa8fe93096d067b7fd91f91e5fec58970faf12592093d14cbd816ea473e31309f94662d675b99398bea30e37609255b8b934fc481f859ba4f95ccec79856b83af61b66082aa2a6184c60a92b45789625030000072a01042d1a1000030000000001000000010003000f0000000004ff070000077107ffff0000012008dd1699c18b29aca163a0d39ad6e60d29cb7c51ad2b0f4f1bdddc601e371509b5c1be580a94e765c53f26af2cf70100dbb398c09f39d58f562008cc9f16139a26889558bae53b6171a3f2bedd16a26736ea430c383d2555d84a418d15ba6519d3d3e060dabad8c62b56396f5b7615616176ea2fa253bbcb0fe6c7d34063f09001d11e61ee1eb86f37f70a94b88d1bcf9de1c35ec0a5c9ca3cb03808bd39a209646a2e853e17ff945e34f9ca7a5c23c1d24e6817e9b0ecb108ac218091552c25540da816577f7103831e25fd2d89fec364877c39a37e6be44ea1567046af1f7186e1c1428b33a019bb3ab6498d70a1e8076380359fbda6ddeab8bb081772c3ea9ffe541d310f333f6c0c9aac0e2ea87d5877447913f747ed0ecbff121323fd964c9b18cd54afe8c9820ebabdb21fdc3437179a01c110656a839e2cb28f54ad2a8696b8039b690bc3c8f9a3c25aff66aa9e0e02402e582b51f20dba6dabbbd0eca2b62c03b2a8e4704edcee400ebbd65713429b4d9b27af4fd5e622a0f1477d195e07e34e013f13631e96da2c60f6c2dcbf528c056102cb78303e6c6b2e47af675b84d29521371e83f6e53451ddbf3ead5ec7fd4cd66db7cf544f60d3a5ffcada1fae11422f2882f694a3e190944459a2227a1197d8c56ae9f59f4466a75ded6189a738dd5da9e8173f9763948b14ae8c93fc981bcefb9839b51fcae02a64c5c8dea1ba56947b2b428548ac140fad103aaaa28a7595160e93bd2d5c960f3d765cd51ef3bb515fe0ecdf78d2f3c9be6a8e5c34595f0632a82c61d2cfacb7f69701a4bf00"], 0x180c}, 0x1, 0x0, 0x0, 0x80}, 0x50) [ 2238.203626][T24936] usb usb9: usbfs: process 24936 (syz-executor.4) did not claim interface 0 before use [ 2238.220422][ T24] audit: type=1400 audit(1636637332.207:811): avc: denied { wake_alarm } for pid=24932 comm="syz-executor.4" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2238.245297][T24936] vhci_hcd: default hub control req: 8005 v0009 i0000 l248 [ 2238.245313][T24940] usb usb9: usbfs: process 24940 (syz-executor.4) did not claim interface 0 before use 13:28:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000140)=0x6) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x2) open(&(0x7f0000000100)='./file0\x00', 0x800, 0x144) [ 2238.306842][T24941] device batadv0 entered promiscuous mode [ 2238.348221][T24941] device batadv0 left promiscuous mode 13:28:52 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9201, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xff0f}, 0x0) [ 2238.467966][T24946] MPTCP: kernel_bind error, err=-98 13:28:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80086601, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2238.468523][T24947] MPTCP: kernel_bind error, err=-98 [ 2238.557184][T24950] device batadv0 entered promiscuous mode [ 2238.586210][T24950] device batadv0 left promiscuous mode [ 2238.670314][T24958] usb usb9: usbfs: process 24958 (syz-executor.4) did not claim interface 0 before use 13:28:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xf}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:28:52 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9601, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r1 = syz_usbip_server_init(0x4) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)={0x3, 0x5, 0x0, 0x9, 0x2, [{0xfffffffffffffe01, 0xb1, 0x1}, {0x2, 0x100000000, 0x1f1, '\x00', 0x880}]}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x7, 0xfff, 0x95, 0x8, &(0x7f0000000100)="8fbaeda73e4120d454ec79622e1702542d45dd96bd9a45d6ea0c355ece1a9be6c5b6fcd7948cd825c5a8a5507770dd1d75209bdbe45deb964c9632d0ceff8d5aaa91826a12a06a41791a768a799f48bc585eeff74976647069ccfecb80a7f20cf451560dfa58bef15e70de7515b1557ea4d6d4ed3addbadab9653e7fa6250362fb74dc5cfe525b1e339867a0a6ee9630923f90d149"}) [ 2238.739849][T24962] device batadv0 entered promiscuous mode [ 2238.768930][T24962] device batadv0 left promiscuous mode [ 2238.777117][T24958] usb usb9: usbfs: process 24958 (syz-executor.4) did not claim interface 0 before use 13:28:52 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9601, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x30000}, 0x0) [ 2238.851964][T24967] MPTCP: kernel_bind error, err=-98 13:28:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80087601, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e200000060001000200000008000300000000009096346beb35f03ffb1d4b72170c7241c3736f6bee1b830e957e99aa67bd0fbb761069c584fbeeb6f692118ebea1b7249c980e08c4abd7e9076040c44f5065fdfa3869be67e3448124452ac084682f5048fc62f38a58d28176face25e868de4d86365a201ffdd0069df07fdc11d11398b02c2f92042f7ceda2fcb22edfc751a6089d284dc2169ed93a64bbb9"], 0x38}}, 0x0) [ 2238.852544][T24968] MPTCP: kernel_bind error, err=-98 [ 2238.986469][T24973] device batadv0 entered promiscuous mode [ 2239.017868][T24973] device batadv0 left promiscuous mode [ 2239.086597][T24979] device batadv0 entered promiscuous mode [ 2239.110083][T24979] device batadv0 left promiscuous mode [ 2239.119212][T24981] MPTCP: kernel_bind error, err=-98 [ 2239.119843][T24982] MPTCP: kernel_bind error, err=-98 13:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x34000}, 0x0) [ 2239.130621][T24980] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 2239.142342][T24980] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2239.149879][T24980] vhci_hcd vhci_hcd.0: Device attached [ 2239.171301][T24980] usb usb9: usbfs: process 24980 (syz-executor.4) did not claim interface 0 before use 13:28:53 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9f05, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:53 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9f05, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8010550e, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2239.183123][T24983] vhci_hcd: connection closed [ 2239.183424][T21984] vhci_hcd: stop threads [ 2239.192384][T21984] vhci_hcd: release socket [ 2239.196942][T21984] vhci_hcd: disconnect device 13:28:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xffffffffffffff40, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70b52a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK, @GTPA_TID={0xb}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x400300}, 0x0) [ 2239.285284][T24993] MPTCP: kernel_bind error, err=-98 [ 2239.285913][T24995] MPTCP: kernel_bind error, err=-98 [ 2239.369315][T24997] device batadv0 entered promiscuous mode [ 2239.399946][T24997] device batadv0 left promiscuous mode 13:28:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x801c581f, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2239.468405][T24999] device batadv0 entered promiscuous mode [ 2239.497992][T24999] device batadv0 left promiscuous mode [ 2239.574885][T25007] MPTCP: kernel_bind error, err=-98 13:28:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x414801) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r4, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x2402c0c1}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="380801c929d905720000dbffffff00", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800070005000000060005004e20000006400100020000000800030000000000"], 0x38}}, 0x0) 13:28:53 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9f41, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x1000000}, 0x0) 13:28:53 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa202, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x802c550a, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2239.575551][T25008] MPTCP: kernel_bind error, err=-98 [ 2239.710822][T25013] usb usb9: usbfs: process 25013 (syz-executor.4) did not claim interface 0 before use [ 2239.779262][T25023] MPTCP: kernel_bind error, err=-98 13:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x2000000}, 0x0) [ 2239.780943][T25024] MPTCP: kernel_bind error, err=-98 [ 2239.826676][T25022] device batadv0 entered promiscuous mode 13:28:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8038550a, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x300, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x1}]}, 0xffffffffffffffd3}}, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @can, @phonet={0x23, 0x8, 0x9, 0xff}, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3d5f, 0x5, 0x1}) [ 2239.877892][T25022] device batadv0 left promiscuous mode [ 2239.889941][T25031] MPTCP: kernel_bind error, err=-98 13:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x3000000}, 0x0) 13:28:54 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}, {0x0, [0x0]}}, 0x0, 0x47}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r4, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x9, 0x800, 0x2, 0x0, 0x0, [{{r2}, 0x8}, {{r0}, 0x8}]}) [ 2239.890402][T25032] MPTCP: kernel_bind error, err=-98 [ 2239.966267][T25025] device batadv0 entered promiscuous mode [ 2240.002597][T25025] device batadv0 left promiscuous mode 13:28:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x8108551b, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x81}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:28:54 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa202, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4000000}, 0x0) [ 2240.063639][T25043] MPTCP: kernel_bind error, err=-98 13:28:54 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa203, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:54 executing program 4: msgsnd(0xffffffffffffffff, &(0x7f0000000100)={0x2, "fc85a62d3e1ca8e5e8f3ff0d96bda4b953ed7e3bc3dda2d62d714c1f109b5ea692f2f72c73ac0db3f4ed7fba5c0586dbc36f2ec107689046b00457ba5795689ce0a8828a2262cbd3cbf4bdf848e19191908802ca4154a94a727aae9abe2e7fc7223b380c4fb374d0f648d0434f7a805c4f8589337887ff007e6a571e0a89fd7ab1a6f4cc2153b574cea3e7c608"}, 0x95, 0x800) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0045878, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2240.064200][T25044] MPTCP: kernel_bind error, err=-98 [ 2240.234226][T25053] device batadv0 entered promiscuous mode [ 2240.276972][T25053] device batadv0 left promiscuous mode [ 2240.302575][T25052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:28:54 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa203, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) [ 2240.328124][T25055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2240.338303][T25059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25059 comm=syz-executor.2 [ 2240.421357][T25061] device batadv0 entered promiscuous mode [ 2240.444884][T25061] device batadv0 left promiscuous mode 13:28:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x5000000}, 0x0) [ 2240.469642][T25062] MPTCP: kernel_bind error, err=-98 13:28:54 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa600, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x4381) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0045878, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2240.470167][T25063] MPTCP: kernel_bind error, err=-98 [ 2240.700290][T25074] device batadv0 entered promiscuous mode [ 2240.732924][T25074] device batadv0 left promiscuous mode [ 2240.752292][T25077] MPTCP: kernel_bind error, err=-98 13:28:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6000000}, 0x0) 13:28:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x1, 0x8000, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) 13:28:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2240.752971][T25078] MPTCP: kernel_bind error, err=-98 [ 2240.817646][T25079] device batadv0 entered promiscuous mode [ 2240.847684][T25079] device batadv0 left promiscuous mode 13:28:54 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa403, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:54 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb800, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc00c5512, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:55 executing program 2: alarm(0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffff9}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2241.042996][T25094] MPTCP: kernel_bind error, err=-98 [ 2241.043456][T25095] MPTCP: kernel_bind error, err=-98 [ 2241.052637][T25096] usb usb9: usbfs: process 25096 (syz-executor.4) did not claim interface 0 before use 13:28:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7000000}, 0x0) 13:28:55 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000080)=""/53) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x3, 0x1}, 0x790, 0x0, &(0x7f0000000100)="679dbee9582b5a1100389f63ac87c1cda31e68469a05a48dc4720b8f45a4260a00758c74aae36128d86a0419d5693e18b9c1fe9af167353bbe001ea60456bd4db8ebec67cdf4bd958a3b6d90e415dab2c06d27ac68f9d832d0698680f8c701252519080fd63a3f71cee35f44fd1c31114b9be2fcabdc066eec8654265f8741b112219c30efc1be57f38524d626cb22ecb186374c15dbf7c9ccacd0e789986c1415dd0ef129c66c6cfb97393ec804a2c8f633eaee315e59e25957aac08bbb9a0c382ea3317c524f280db9d372732ead48dded7a4cdb991c0fc0d2cb153e70ea", 0xdf, 0x8, 0x40, 0x1, 0x10001, 0x6f4, &(0x7f0000000200)="9a7f63d83736e65dbc26e233e974d5e74188e9223a3b8fbe40ec2322645300f535d4304c06510cae069ff6d244d3a15d7a39c04c94222d0d54c1d07e2ebabf02cf1896868d751b6b5d47d993b0d405826a5a2cf49ff0e97d015d399aa9110a467c5b29ff6b21679af9e6b6b0878965fe5e76ff41bca677506337c418fb217bede20424"}) [ 2241.119824][T25097] device batadv0 entered promiscuous mode [ 2241.145168][T25097] device batadv0 left promiscuous mode 13:28:55 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb603, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0105500, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2241.283946][T25101] device batadv0 entered promiscuous mode [ 2241.322353][T25101] device batadv0 left promiscuous mode [ 2241.376903][T25110] usb usb9: usbfs: process 25110 (syz-executor.4) did not claim interface 0 before use [ 2241.392214][T25111] MPTCP: kernel_bind error, err=-98 13:28:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x48090) 13:28:55 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xbe01, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2241.392861][T25114] MPTCP: kernel_bind error, err=-98 [ 2241.442564][T25115] device batadv0 entered promiscuous mode 13:28:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x6c00) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r3 = eventfd(0x80000001) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000080)={0x0, 0x2, 0x3f}) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x10010, r1, 0x800) 13:28:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x8000000}, 0x0) [ 2241.504655][T25115] device batadv0 left promiscuous mode [ 2241.568298][T25118] usb usb9: usbfs: process 25118 (syz-executor.0) did not claim interface 0 before use [ 2241.578114][T25118] vhci_hcd: default hub control req: 8100 v0000 i0000 l0 13:28:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0105502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:55 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xbe01, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x30, 0x23c2, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x1, 0x1, 0x401, 0xfffffff7}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x88b5046bcfe946b) [ 2241.693191][T25126] MPTCP: kernel_bind error, err=-98 13:28:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x9000000}, 0x0) 13:28:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x2}}, 0xa3, 0x9, &(0x7f0000000100)="63f3e7662c59501e9c4ae59e8b838d2ace90ea6e5098be4bca4a2cec66ba59c37e77ce921ff715f7f4e95441e994f82615b52102e25a0def4fdca703f6a80dc12950349f2f00d2d590d7057447519dc3e651058d7e993e26ed91dafd5aaeab01fbd07afc7f8de40ccb1f95778465b97dd43c08407c29be05fb8370481fbacfb1a925ec1147e96aab56585009456f2d21279be1d7acc938e03244a25ce4415c5c8f1d56"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x3) preadv2(r0, &(0x7f0000001700)=[{&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8, 0xd2e, 0xd836, 0x0) [ 2241.693930][T25128] MPTCP: kernel_bind error, err=-98 [ 2241.727070][T25127] device batadv0 entered promiscuous mode [ 2241.755597][T25127] device batadv0 left promiscuous mode 13:28:55 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc25a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2241.926912][T25137] usb usb9: usbfs: process 25137 (syz-executor.0) did not claim interface 0 before use 13:28:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0105512, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="eb2f80e0df861b425b236d04c80f1c0c74cc5673073e6dc6673f0000000000000000e3fb95d724dc81d104ae34129cffe3dff1982700"/75, @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) fgetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f0000000180)=""/74, 0x4a) [ 2241.966020][T25142] MPTCP: kernel_bind error, err=-98 [ 2241.988619][T25138] device batadv0 entered promiscuous mode 13:28:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xa000000}, 0x0) [ 2242.004005][T25143] MPTCP: kernel_bind error, err=-98 [ 2242.035531][T25138] device batadv0 left promiscuous mode 13:28:56 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) [ 2242.077129][T25145] usb usb9: usbfs: process 25145 (syz-executor.4) did not claim interface 0 before use [ 2242.089174][T25147] usb usb9: usbfs: process 25147 (syz-executor.4) did not claim interface 0 before use [ 2242.144393][T25148] device batadv0 entered promiscuous mode [ 2242.171691][T25148] device batadv0 left promiscuous mode 13:28:56 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc405, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:56 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc405, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r3, 0x8, 0x70bd28, 0x25dfcbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x4080) 13:28:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0185500, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2242.267710][T25160] MPTCP: kernel_bind error, err=-98 13:28:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xb000000}, 0x0) 13:28:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x4000000000000077, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) preadv2(r0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/226, 0xe2}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, 0x8000, 0x80000001, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) read$usbfs(r1, &(0x7f0000000080)=""/1, 0x1) 13:28:56 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2040015, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="537e7c8081517266b42d6261fc7456bba90e09cd39d4fd6f1a315c8cb1136e075e32932164a18c6427f5c25f6f76ba8a69ceca859ffd5960592197f6191c68aac33a30e448297e37e55b470f6e20b2f57dc747a5fba01552c6e6f1d49fcf4c51e2880e923058ec62267382d981f20834153a02c68adbb0dbf8271e826da64e3808990b4dcbee1905940e713f", 0x8c}, {&(0x7f0000000480)="8ed29b668421754bad2e4a6524d58903d346783a8adacd87a28fb1dda88f6d249f18fd59438945be9442b0dfff75fada910ebcbb8cfe75d5f577fe92549372cf263c02ed1fe6f7d672dfd19e25a6769b93c0cc053a7fa131a63aae2e88542094698e23a8d3f7519a2b264a15736b8f18cb74a2ccad1faa44edd4e545ce42e89ee58634eadee9a88bf01b4d0cbd66c13e02626583e8157eca79bcea9d80831390192aea19af90e6333236f4391620b6980fb72522", 0xb4}], 0x2, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @loopback}}}], 0x38}}, {{&(0x7f00000005c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000640)="dbdcc1687e9428795b0feb5d567227ea75ecd5c3b78244b8eb32c2cb9b9504584537eb99068e00738ce38499891666e08c9928dd10f1e089e19e4615ac459305c46ee9b668b20a4348b8fc7a9dd384130f914bcaa0ee45cff5d46d7104000000000000006c0783f6873599110cb986d0ac7a5d1d98784b260f0e398eafa4f6a1d9641ccc54d01de86cc357f082c623020c1365a658d55c8ca7177710bb1a9701ea652486e03be6e0896cf417eebdad681750f3c301709f42613a290101000000000000b243614dfd27df639391ca16833ef29e9153d7a4c6825dc446", 0xdc}, {&(0x7f0000000740)="404e35584dd4b972dd7d34878436d2595dbd1e72e5e3c747161cc7b0a101159089298cd990b9f5fbda", 0x29}], 0x2, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xb0}}, {{&(0x7f0000000900)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000940)="5da65fcf5de13cb00cace66ad0a65518a7a051ab5868ff668a6e0d04d3dfa0da78edfbf24f4de5d1d5e787bfda5273c813fe736bed79f1aaf43e5c4fa486bc506c81eb12c16fa0e0fea088df4fde6b098831a5c82de843248c12ebb25b7739220e419c1a70cb14a8e07652db86429bf19166563494ea537153736c9bbf95d57a6003a118944e3db26f3e5c5a9c1b26f6d847d2e8ae8388f04862b23eb913bb28730c8e6550ac90bdcdcdecdf6679b3ae4ff98917840cdfb1890e30581cabe0131d30dd2a35b181d9d2536ee96473", 0xce}, {&(0x7f0000000a40)="a47be5efb098a6bb4e4c027b8fd759c951a70f2a1ff6c6a86893ab23e95962e33816cb01a0432669ee4c837a338a0830f8e33a983996e861e14664aee80b3b4cf2cfcd2b6ccc99067ed3d0dfbc7c18d029e50a968a2aca021f72664a0bcb3ae107ee6e7e33d27f5bec4e684b737b51d904defd4d8cbf07563ad26214137072b81e8b2f5a7a6c1b7dd1249beee02935aa767774be0255b5c801e41e4370778d8f16c592a1a66425b499fc238701a0b9890ab17c43a323e221f86a0e7423b1a1ce30218a8558a62e3547625f67b081cd4faea35f90c6fa98ac63f9b4291e374208aff26fee", 0xe4}, {&(0x7f0000000b40)="ab8a7b54f6b66d76afbf98cb79be36a22720a2f973429d93577f7edb511415146a9d6af12857122467bc4942674c74df430c788c51b1e7252e82c4848d5ea67afc7ac1f168415c3e45ab802de7c950e5287e7ed6ac070d1ac225f4bd776cede0e6803c767d48e5a8db59d0900c480a201f645db9364928cb315b41f95be7c1962006fda8a1d5d72307e381e8d46cc1eeb7f78ad5ae5731bed39c6dfbe991cb052ede0ddeace7e1ce", 0xa8}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="c44c113babe4f0f97fcfd654de6281f5d60635ff0bf53e4947f3c144e3f69f61ee88de54855f9000f95fcb9b516ea42909160e9379037b4c52912fac3fc2c71d28b0be6afd12d2ab85e442a1cbdbbf195738cf02a37575ecbef10350ff5925ff008f1e1262fea666f8e47989f06a4166cd1b651a53c1b882d5e1faf64c8acd04f8faeb4ade99ef43f5123ae5c4f186e4724624bbc05718cecb7dd8944b73dd6c89ad81042e07293bb59e348d0ed72aa161", 0xb1}, {&(0x7f0000001cc0)="84d408c2e0bf780d0665844b103abcaf2689893d7b792424e9bd0feee1678d7f5f1dfe6a8ae2b153e67955846d0a40f0fd55d56a3bca6d028ec8471b60b3c9335ceedfbda973aa364e09b298216feeb8d634a0997b005a3ca72a2e1b4d1723a9d56f55f25f56f5566a4d96fd47a5bda97e9adfc6d5410f1b1c07f646c580de247624cdbc4a0b2ee159b78db22c2a942fcbdc577962c124117dfef9d39e", 0x9d}], 0x6, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x30}}, {{&(0x7f0000001e40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000004040)=[{&(0x7f00000046c0)="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", 0x1000}, {&(0x7f0000002e80)="35921ccec64e321043d69080f8ec45ae393da223", 0x14}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="13a0952bfad27ffeae6720e8ee9f2f8fe8dd4396fb4546f29003fa4440bc", 0x1e}, {&(0x7f0000003f00)="b6614bc8d1700a83d74b62be26165638742a6182715c7fba9e0f8fbea114e0225989cf5fa87c9d1b04c3b1b0fb66d71b220b71475d33aaea26c809ec743b35268c21f382f56248ebc1b1bad835ac5b19542928375b1032d6f323a6b6f78037f3a3dc715647842d47479f5747aa6e854216ed29233fdf9db144340a47bbf3a43a907b3525262a92f079f33dfa58f4f5ad82f0ff89e228ffb54baa73a2c2b8661ebb3adeab5e1efe9532c7245c4e0004d9b639bbcf7a37fe6b06dda58364e7c1c0699020918b7018e69276f3f101078b80849e707021874c90d603e20f79b9ffe63cc1640ec647648e", 0xe8}, {&(0x7f0000004000)="80eb2d4984ff", 0x6}], 0x6}}, {{&(0x7f00000040c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000004380)=[{&(0x7f0000004100)="35244da6bb775e0fb15609e994d426162cde138fc06000e339567f44a5b168d313dff436df28185cdd", 0x29}, {&(0x7f0000004140)="ed15a1dda2fd71b08ce807d8ad1acec296c75b91889952ce1a858d56fe8b82152404a88a09421c80efc02811c77114eb5eef4f2ac7c553d25c6d82d73169b4f14f2b847f0839c0ab4677c3b13c6a3f8c7a123c32bdbdf682a03efe3d46d39aa1484032c41e63a8306b677920fc3222b3f1c48e48f67d0c1455947b18b403be9da7164544aec07081d8efda2941dd42da56587b48d75d0e4cf7bf7ed4650e9ffe75c46617c203f3a2d0021045ce81e43f4d085c3c38175900ec5bf343b8c6be20471161f9b0185454b9f8d426c621446ac6a4f3462c4b118dffacbc59ca888ab0936745b9f7c4c3bb54ae0adff5867ccee4", 0xf1}, {&(0x7f0000004580)="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", 0x129}, {&(0x7f0000004300)="9ec8208e3270ec4bc71d6c46a56c173dacfe3bf3891b2102433806409c3de82d85934af64e402776d9ecd0f95bc61b3f59b5380666e67a7e253f024c40a40f3752e9ebc0f8", 0x45}], 0x4, &(0x7f00000043c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6b225173}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3b}}], 0x50}}], 0x5, 0x4000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="0000000000000000000000000b000105006c6f776572000004000201"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800086}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@dellink={0x4c, 0x11, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x40, 0x64000}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_MAP={0x24, 0xe, {0x8, 0x800000000000, 0x7, 0x0, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x4008014) [ 2242.268219][T25161] MPTCP: kernel_bind error, err=-98 [ 2242.457082][T25172] usb usb9: usbfs: process 25172 (syz-executor.0) did not claim interface 0 before use [ 2242.472133][T25172] vhci_hcd: default hub control req: 8100 v0000 i0000 l0 13:28:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2242.515267][T25173] device batadv0 entered promiscuous mode [ 2242.538007][T25173] device batadv0 left promiscuous mode 13:28:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xc000000}, 0x0) [ 2242.613557][T25174] device batadv0 entered promiscuous mode [ 2242.628473][T25175] MPTCP: kernel_bind error, err=-98 [ 2242.629014][T25176] MPTCP: kernel_bind error, err=-98 [ 2242.651303][T25174] device batadv0 left promiscuous mode 13:28:56 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc505, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:56 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc505, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x5}, 0xfffffdfa, 0x0, &(0x7f0000000100)="ea5ac828ac7352f5cff25ccd6f6506ee2d7119fb7aeea3d9edc3d745f684bb1dd3c0b0c7fc7623551e8e5e575fbd85e322a61d0494de986fcd9805f5b268921ebe607bd287ca98c31b7382df56d9728d2cc9bc9bb2ddaaf49fc693a7b22c375bb80801df3bb4b0e30dc3b3cb2d3829ae5edb5783537efee7aa23a90ebbaf45337df5b85f2652a70ebc34a980a9fdc0d456fe7c3624b7697832f8172f43b5fdc0148b1587cbd3fe3c07a3ac53b6d63f788b5024bdcfc09addbc56010dd74ff2b5e2eb15523f918b33324c425d5e57af54545f71c5cfd2c5327acde6307dc872fd", 0xe0, 0x8, 0x6, 0x9, 0x44, 0xc0, &(0x7f0000000200)="93400e59513c0b477aac208d9ad993661b44a353657cbf8b9e0886aacb1b1cffeb49c2f45f9278feb391274def079553da1e328693258c4b441940f7b9fb4aa3860687063c084cfcfbf2a0b6e9f96adaff7428e879018d988641bb7940318d4a43e5adaef91ca7f90bfbcd3b9d405407f088ca3100aca418ca440903f5c9706f494d74956c841dc0f1aba9096c36ea2939027656fc0d7ed524d2ae5e4f2050a43095a1b5c6ea7229fb4527a61a6ebf0b0330df59cbfe29631ab6da4eff077ae6"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2242.788946][T25187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.821011][T25187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.850664][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.863067][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.903374][T25194] usb usb9: usbfs: process 25194 (syz-executor.0) did not claim interface 0 before use [ 2242.939916][T25198] MPTCP: kernel_bind error, err=-98 13:28:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@RTM_DELMDB={0x58, 0x55, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x1, {@in6_addr=@empty}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200080c1}, 0x8080) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000e00000ebcd2c2eaa9f26c263cde6badc8f07573b775171a167ec6793a9cb7737dd3300"/48]) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x170, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xa4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffc00}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xca}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4eb4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x98cdf50}]}, {0x4}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x9c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}]}]}, 0x170}}, 0x48800) 13:28:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xd000000}, 0x0) 13:28:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc0189436, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2242.940613][T25199] MPTCP: kernel_bind error, err=-98 [ 2242.960644][T25200] usb usb9: usbfs: process 25200 (syz-executor.4) did not claim interface 0 before use [ 2242.976299][T25197] device batadv0 entered promiscuous mode 13:28:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1}}, 0x0, 0x1, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0x23, 0x80, 0xf000, 0xfc, 0x1f, &(0x7f0000000100)="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"}) [ 2243.011525][T25197] device batadv0 left promiscuous mode [ 2243.085311][T25201] device batadv0 entered promiscuous mode [ 2243.110395][T25201] device batadv0 left promiscuous mode 13:28:57 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc600, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:57 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc600, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xe000000}, 0x0) [ 2243.170341][T25209] MPTCP: kernel_bind error, err=-98 13:28:57 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket(0x1a, 0x800, 0x401) 13:28:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0xc020660b, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000077, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000100)=""/4096, 0x1000}) r1 = syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f0000001140), 0x9, 0x40602) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001100)={0x43, 0x39, 0x4, 0xcd, 0x2d, 0x101, &(0x7f0000000080)="5469e9349c478eaebfb4f2b731fbd70d900ca1865439205a6c26afce560e0f60050f9c14f4862d1241e03b5503"}) [ 2243.171009][T25210] MPTCP: kernel_bind error, err=-98 [ 2243.358231][T25223] device batadv0 entered promiscuous mode [ 2243.375677][T25228] MPTCP: kernel_bind error, err=-98 13:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xf000000}, 0x0) 13:28:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x0, 0x1}}, 0x0, 0x0, 0x0}) [ 2243.376209][T25229] MPTCP: kernel_bind error, err=-98 [ 2243.405194][T25223] device batadv0 left promiscuous mode [ 2243.442640][T25232] usb usb5: usbfs: process 25232 (syz-executor.4) did not claim interface 0 before use 13:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x10000000}, 0x0) [ 2243.477101][T25234] MPTCP: kernel_bind error, err=-98 [ 2243.477808][T25235] MPTCP: kernel_bind error, err=-98 [ 2243.497469][T25225] device batadv0 entered promiscuous mode 13:28:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r4, r3, 0x0, 0x100000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x40) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:28:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r1, r0, 0x0, 0x100000001) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r1}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x80000001, 0x10c0c2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xfc2b2d06a66c6fb8, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x1, 0xf, 0xbe61, 0xffff, 0x3, 0x1, &(0x7f0000000100)="0fe905"}) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000500)=""/38, 0x26}], 0x5, 0x7, 0xffff) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x5, 0x1, &(0x7f0000000180)="e05cb7af0a4dc17022da650fb311229317eb18da2d039406c991cd9115bbaa9f99711994dd5ac73f1e58b2e31d9486d9f8857df54ad610ffd6bf1bf0102d525b231297f2e197a786e3d6a42a6e31e24bf59bdcc9d341b3d620a133ed9bb500ee0f846571542aafe3fb6737edd1992e49f4a9c8b5a1c21dca78b33f17f387a533ecd6cf2325cd5d"}) ioctl$USBDEVFS_BULK(r2, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:28:57 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc602, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2243.528833][T25232] usb usb5: usbfs: process 25232 (syz-executor.4) did not claim interface 0 before use [ 2243.530496][T25225] device batadv0 left promiscuous mode 13:28:57 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc602, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x5, 0x1}}, 0x0, 0x0, 0x0}) 13:28:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="641271d59100"/16, @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) [ 2243.699182][T25249] MPTCP: kernel_bind error, err=-98 13:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x11000000}, 0x0) 13:28:57 executing program 4: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x1537, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v1={0x1000000, [{0x200, 0x20893}]}, 0xc, 0x3) [ 2243.699634][T25250] MPTCP: kernel_bind error, err=-98 [ 2243.763476][T25252] device batadv0 entered promiscuous mode [ 2243.794758][T25252] device batadv0 left promiscuous mode 13:28:57 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xce03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2243.868986][T25255] device batadv0 entered promiscuous mode [ 2243.894417][T25255] device batadv0 left promiscuous mode 13:28:57 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xce03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0xa, 0x1}}, 0x0, 0x0, 0x0}) 13:28:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x104, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x20, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010102}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xb4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x80, 0xb, "190de9505664ebdc69821802b93c6222ed332ae56fc8be8d76f0584c1ca5a2d9a080342a3135bd7b4b8f257c806813dd541ff2d9ff18026ab6f58d94db9f30a9f237b1511baacd68cd62f8a19e65ba3da83f824c639491e62ec41c82366192791fa8d60215d5dc5ee3e3f6f3a95627717711c2fbdad7d9d270d7f11d"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x200}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x1ff}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x200}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13:28:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x7, 0x7f, &(0x7f0000000100)="5f5c273e1ebe22b4f921c82387e86d7712c0694614e3537ff22fa30c9c4e5c5a44d33da9a98d52747772110e5dad95dc4a8c6b3b3c35e0b616c8838413ad04e2ab91f00a0b2e03b239da8b1a86f5627ff4a6dc1b9e53fbb832665884c8ca3bb00777848daaf1e8d9450b23e8d23599b9eb8c5a414f7f7671431f387b6e93"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000080)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0xfff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x7035c207, 0xa, &(0x7f0000002700)=[{&(0x7f0000000200)="a72fcdb2e72c2af75c63460b4f6964bd1f9644f007d6430eac87679916e7a89e06768861b7670fbf95e0f7269a5d9f5cd1467144cccec0902c21f8d59b31afdfc87ba63da09a9f5be67ca3fafbb91092db0689b221eb175b4d8f712d3887841240b48d91567284407602c61c024ee0591572db12784ef1e1", 0x78, 0x1}, {&(0x7f0000000280)="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", 0xfd, 0xc91}, {&(0x7f0000000380)="2af89356bfe704cbcbdd05827fac6350341f190f8b47ddd708fb1109642fc2c802eed4f61a0303ee56c2", 0x2a, 0x10000}, {&(0x7f00000003c0)="77f38608a66a3a9b199255bc36f742d6", 0x10, 0x8}, {&(0x7f0000000400)="bcb13f075dd472b54acadec102032c92ce896f0b26041c01490b4c97150a2772", 0x20, 0x8}, {&(0x7f0000000440)="ac3ebe04d63191b5004315bd787613d3443b2100949d42ffd3e495c16ab4b52bece2f4e30b95639b10f8de1b4361ac082e15d2af8915a13279407eb97292bc4d79cd6e7d5cdc38357bb20212634daf5387faa73801e93d0da6f2bdee4c379167dff74fcefb8f1e17b52159a49a8e97e6236690f620d1d95c3d61d29eb9b64d6528f8edf87cad85c168b51065c62996df9829b41f69df4cdb59503b0e3b12b9564bf069f2f097e49447834323194bbe37b0c2130a44576fb30f85c42b4f471d15915f012ea288162e0a50e2cf7745a2465a372d7a416661bbdd15ae92e0479e4148e471b9605b99b99ad7e5776b428c8f931df7e7fb951da1dd219a8dd54f19120451e4077c998491baddf4e6c1315588973f9baf87aad3e9b73dff6be4850decaa2916a2cbe3bfc73bc83cca9ec45e051f16c92966450a420ad9db93d547d6020d5a53ca5a42d264e6ced802622fad487ba59ade603b3111e2642669b459a444501847f20d0415c6dbb679e2754b431316a95f82f976a6769febfd628eb1038ec73f32210a9922e458879dd095dd4effc899391cfcd13248471f583401c515534639c3e1b4b454280df87d00419702a221e203db98601d383c04f1a7c3a30bdebb5779802781ff8c95a667376a08e8ae6874f307155c7a44ddb8affca6c1fcd4d4df426e6a4b7940b21f8300bb0b7196d59fa358be2c2777bf1d5692dabc77aba8a2a93fc5d39e19b3e785ca4f9d5207e6fa6be80b6aef47e333e3b4489089c6990e3222b72e150e85d1cf55281a7c50c36ba27493e1d4e084ed08442772361350e9f48b2c69719d109349e6b9d963d84b18a6eadf646a44c01f71b6c82931598739aa7110f2f13254f8229fdfc72ce8807119dc8f4f04e8ab7178e4962b762ff50b8d6b185d11b76f7e0741c43bba32a39aeebc37abcc9c25d7401063522bc8cc371796f83506aefb4931bb82b0189c4eee72c4caf1c2fa1bcbe6ca38d2fee29970b1ff6ab678d25996a88c365a892e454b4d995101de3ced674520edb76e10a7566d6fb59b1de2f9ed1d75253da195fd89feab4db727d391ee2ebf137562bd873e9194efa2c06efb02416fdd99f3276ebcaded973587ae9f7712d5116cb3e366e8290d702199fa97c6025afaead7e4fdc689748819eaf3243363b09dc65bc534342402cf2d9b6eb769657387b402ca3148d1ef21490b4fbeab201e36d3ec6829301f228464f62422b40532e71db2c89923e8311ce4dba97054630624edb4d6119714e5bf4f1740b1e83c17a8f5319645bf34f3b1229f1b914a11dc899b3ec78cf76448fe090fb26afed9a340109aa66e671577d22a46e81321b3e61527f569b595e17fc9e0b89db195ae5c157be6158bf9f3aa75112d18be57f9373e39e8506d776d573373e636c48b38dafe3cb737aae0726940e8e4640252221f3a3a91e8cec16ab360a2e035cb0fee6f561618839f8b1a29f50ddafd72eda90413e878ae7fe83cd46f96c21c5506ae7cdef91b1b5859f03e6aea6676b247c2a91cf7beacc34035f3c0025a9c13a7341fbb0e5c3064d88de22ef6a45a8b0dfb3f2ffe60aa6ddb8797c3c062be3644756fbb88dad36295182a8d74abd95805694ec371e34bd7cc45a05f31f2617a40aa8c20a13d7742b40ba7c793309b2dba2c638adf098180394b605d23c0afaeda31cbb6ec738ae032e244ad684ed0d1dbb4a1cc716a22e018d92669c35c9ae135c192ae410f75dacf7170cecdc8640f297a45878cabdc2018650b0787c89c97c598bd72f96b8cea5c33a503ff100b0d059c9b2d2a05836ec2776b9e4696dfae330ea4cf53d7dfd6408535a5239dfc00b2d9274254f8b2f3508b85e06edf34931b79e05f9c17bdfacc828ed54dd3b0849a279c344c0ac272c5c8a5da87cd6064d0bce7e6bd8cbc35c2ec82aae8d5eb8b416647951ecce46ff66c7d85ef659f5ccd7dd9d92325cf671ac81ecc4b6e0135491a86dc6e6c41bc8ba2884c276e439f5a6063389a55e1126040ceba49251694def047527c6771ac66b7dbd46302e805922db3188ca93ac951296ca968727f5bcff8689ea3559cba005566a8a48d7084d70d9bbf7e3a0445c84af50a456cccef443ce67f6218210deeb531c0e60e7a4c4b41223ab822f09b540c162ea7a359e7a9a22159b0c0f7834fa532af13b27a09e7a8dcacc7d173ea843a4995e42faa01611a23cbc4bc8c74b8bf4f155dc04e91ae0eeea3286a83ace6fb01960d879e8b8c52b81948ed84356824b602bb84983bbc7526d9eb84b5a2e42e098dbeebcfb286eff72177a55b7d9f754c258a1da0fa79b1bc5daea16c6f8920628a5fecd78d06d290c251d2a5b8a4ef38b58e68c408e4c6f980f78ac49bacca0d73b29d218a62037c5af6461822475400d014e638bdc9feac56afadcc493a49e6d279bd8ef601d25db17937171551e8ed2c0c27a9c3d03eb4f07977b732d22ae3da547ee675ed25d00ca2ca12d08b69a927fca6e70c99d15d88bdda5ad518967cc5f0823b3578aecb02433aa22ae6b56939ee5651341974580ecc3aa12a6593539bfde38355bd89754d16eab18cc3aaa30cf17f10dfc2f4c865db3a965ce6288e1ddec1cf780cf3957b4e048a9c11f102885faa1e64244ac4b185d4d8e1690d27b512c7929dd858a250de6ff277194fcd50249d9903c12abf4bf8577c9b03d51b6fc2861e52d4a0f411566095bcfa0f00d06a9480f206e6312dd90ecc713b32c586893eec5e3081fa468bb9fc8a6451a494401302f24749ea3ae7b27bdb0ecafee8a600717a241094ca22941dc2b6b7ced537191a5b73daab80d7489e31de70b5389b0e5df2de571b225cba3343d45b770a49981e40d5505d6b6284dc73105924f34c123bc6fde023d9ef2e87c18df46bdfc7d887ce622cc757ab7e03f453535fd2ac6db2202c8113fb6369f5a180cc3cf7296d685a635948f4881b307ad6b9b4e979bd6e551ba8732b7dfc47851117e8742b590e1bb92f2e4e9e3fa0dfa82820a92bb891c70645a375727d5827879cbc3b678cd07946b4046a22525976b163e4b17fce9ffb1de5f6840785cb345b52eb78301118cc61c2431c7bd90d7bb8fba50e5708200c45bf007a1b5d443596f135810b217aa9d4565ae6ca405ce0b96ddf638010c588e13f6b61df42301b515bef890646fbeb2ce06e426c8e03a7e319422ec20fa6202d049cfd527c004221172544a15f1741b8d7d712ad2155df0ee2ce2aa86b23804452ab54b27aa624c7112a39da85d004c4a936d387bb78c10a73c6e49d56ce89a1c0dd408ec39454dd41806cf95531825fe0728c731b9bc7cc64a790750fe355803466ebbe9aebbbe47fe0b09061ca082678303006d8d2601b8edcd9f7678e86c9843171884169879412610e007dedab3b5e546fb013a7bebbda37b91febe28e02bc021b54d3de1c205570d53190ae62efe64ad2be9ee1b25de970ca3a008a24c0f63e922106761e6dba8404b8766c44560a70854ef43fad42bea647489dbf520176a63955bdb8763086bd04011a1387b3a18a64b85cdd33f16ccbb1102499cf8c20f2c4a3014bfeb6e3eaacc24202ad075f32750b1fee3b75e69dae838ebe47c3b31e63ccaaacb931b2760f3daa5d6bc92e8c92072e56b5eec6f9d0394cfff41559745967a47e2f79d949fdfeb7b142634d40b5892cf472c5927a1b7b57480fd97b03cf47a65f7023436ef0299350b9a6dd9fc86f9b0dfb1408732dc3cc28c7e84a52205f8d9a5f54876da4b17e36f1b391dcddef8b35bddaf4e40e7cb29e192c4f5ab8d9a5b4288af7d26127874646e84ab08a36844eb4d6d53fea939fe6ca0a6311c8ce0623f3c9465e9b23481b4353ee44dcd1c1e51e468d64afbd4a3d738af97fe302a71bc649fff90ed41917050705e1c98caf3369d914383dd3a015316caa2592e984913985dce4fcc328f1fa92d03c6d9eb07d03fa5bf141b5e24f476c08d94dd34f54842daa67a8d0fe37929e1e9ae8a3288b65271016f61f03333faa35906cd4374aa710de4fff1734382bd5849be1e76b4b6148bb070c0da4d8df46004a93328a6f158aead61b7b929901e7b18db1f09d866d52f26e175c4c13940b5232524316bfd40d3f414eb294d1ed711f1ed9dcd84fa5d31b6b0afa8008d7b191d16aa083e012ff5b60de64ad35fdfa9fdccdd3746d808c328847710adcc67a4f356e2421403234b686cf4b5da80d433b9417a1a1673f81a61f5503b2cfe5c88460cc1d3b487a30a89c652daaf579d2de692ff6aa66d7a181b918fab7a819c10920359c6acc54bf49ea69ce82020417b77ce330cb36ef23f6a71ffd4d4db1f1d0625e7314cfeabe7e60aab82227a651dd8d284113fd9743d3f2af468f5039084557f0a55b9ebbebe5151710328ae6e0359949c8b26a3b13dc906023b004c44bc7493fe2336901453268ca4f0f51e03f797656b221c5e4fc28995aa939da5cb505145a5c9c56b71fc901abc2bab7ddc397e4398099cbad9b060f7a9bb289e746e579857e5a08c97e1c1969c2acc26c24f2465a9795f6a5a57977db35adbd0f78fd6e237432e590c4fb23b1dbc1c483a41a18a50a311d543aa8e4499c73249158965cf3a53b01bbc7ee4bd1d439a48277a562505852f8236e15b71818cbc422c82c9742d5abd3f0cf73e3e19f40fd9064729357baea1fa229fe337d09b54c0d6728804bea54be00358192ca681891a1a035ad341f59331678232e1df4f595b29fd1c090d05dda47973ce2c6c85d95583fe90ee49fd9c578d02422e8b82664f79005c783cd5aebf018f8d8538814ab96958835e7ef5f37645d37741dad9e56bee819c64aa507a6f38f63d16958e1cb787a50edb882e7017ec836bf21aff5f962125303b970ca41dc8ceb0626afd3de5e6ce1c761f1c9bc51848628260e9a8c096c6f8579e407ab80907b95f26eceaea4c006af5ec0fa9f378332137ffdef56cfd5d66c5bbbc9062a937cf697de6d6196b0767038ccf4e0d4d732f94651dc115513480f02d33965f77ecef41bc54ec9bec1a4fa6ab7422c602258bb54ec7c0678e09ae1b878fa1d5359b0cd7fdbb1c39049fb4021ec51943fa754d7957d38fe59260102ca6f68d363bf14885bc8ea6e67900800b73a36357cc85155dc7e71775761601faa4f6b2e84c1ba8df16aba2a7baf0ce9f84e04490ee6bf18d5a0d6c69c66f7e6a9fcbf4af5e2bde12c3fd544a79b7541085da39fe9c7811217f9a81bd4bdd240931321a3ed63dd4dd0543adbda97ac9ccc6cdb0654b81c4b2ad6b3982a26b520a9945acb0284ed517735607acc82e3c5389aaaeba7a82ad53e2b482b64a9d5600bfb17b1bf0085ded539b5cc1967ba10ecf58777a131a3f791496755a77b29fcee93d5be5ff1f09cbcf3144836485aa3a797cadf0a71f5aa29c8825d42bc2fc76e9d9cd3f05c45099716b000aa92f83febea954f58fc3df96af3ff421b26a5efe55ded0d5b2ef226accf21bb75ff88515b1d688b4179762ca1268c0c3694284bd6620e2704f0ab32f51d7b01dbc9f5b7da956e0d5782f53796a6b7c892a42f57d44c0c057e90788a80ee317767d1142c06022fd5c21911dbd522d587e4785c06126638ea3726a948db748e015bbecbb6df6cd899731186c605f6b8316cdf5f2f6a2658cb1e4d906fd33f814a2db35b9d1009cbbe2939f90afe168c1e63e5492d6b40409d7a0a79942d20f7c1a5b4978de3f3fd957af6c0a68ecb3217df6c6a7480b73663038d37c9a76528c6c189428bedb8502643e51916ab57801eb5a5ced488ae424b", 0x1000, 0x7ff}, {&(0x7f0000001440)="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", 0x1000, 0x45ed}, {&(0x7f0000002440)="d095aa38723f8e370b400337751a590060ee86eda0e28372369fd450f81f99ef31f1612cffe62a7af3dc5c0e9f88d187fb16fc1fa8d17d29deae99d2171d363211e7197ad8a0ab7dc000689cc1cbafa9834564b00b1ca434e10491c878c10e4b36ae3ebccef63d8224b7fa4049a249e5505f34b861ec90676f986bbc77405cb731615981b119bcfcea3e0e62c88247ea566014715dfb0ce32f97adc884788cf3a090af701c3060776bd7b046252fbe6e17d32b197146c871a379e179329fdba4fc04b5acd15ab7a6180be0efcd6637c4cceaddcff2a3fe43c32cef5830a1", 0xde, 0x1}, {&(0x7f0000002540)="62614cca0fdb2ac9240be01a9518ae8371bf5854b0c3870f5ba0c218a136e61186f2930d1a91298459064d02bc3a1e0f56af9945c88ffc73505c9c260ad1240bff1945a7f53891ab55576556f16740b3cde8d71c5a5d22c740acac6a834adc1fc4dd3e70ffbaab15623270ac4eb9250ae0126c3c6ffac4745b42a8d3cd55a2a958b806b72337f2ffc9acb25f51b2c98d7cb233cb109c7573ae3344d5c0a26a22c9daef4a160bf470d3a570872adb4b50bb14665f83b429439eae95af540af720138c89f3ba31ed62e2c5e9ea3b1e6a597414f6871a5e43", 0xd7, 0x1ff}, {&(0x7f0000002640)="426446fca652aede6c32eb63bcb056c9547d7fdf7c39908412064e8dfe41fde018c8fc40fb87c4525f29ba5a089ad518f829e65d60f3723cab28a49d28e60d575e856d0a486441e7172603131931bfc5b57bb770670848bd8031fef128920077c7fb8417e6797daf1f217fa6b73d46b9a193f49a01c3718ac5f3bfa537846c3e38dbe4d9cb200d71f5c4fdd9fdac7858c5544338b44a5e34c940030657862c6598171dad40a6", 0xa6, 0x4}], 0x100009, &(0x7f0000002800)={[{@shortname_win95}, {@uni_xlate}], [{@smackfshat={'smackfshat', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@obj_user}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) fcntl$dupfd(r2, 0x406, r4) 13:28:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x12000000}, 0x0) [ 2244.070796][T25270] MPTCP: kernel_bind error, err=-98 [ 2244.071307][T25271] MPTCP: kernel_bind error, err=-98 [ 2244.157018][T25273] device batadv0 entered promiscuous mode [ 2244.186158][T25273] device batadv0 left promiscuous mode [ 2244.257499][T25275] device batadv0 entered promiscuous mode [ 2244.272431][T25275] device batadv0 left promiscuous mode 13:28:58 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd203, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x2c, 0x1}}, 0x0, 0x0, 0x0}) 13:28:58 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd203, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104041c}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x240000d4) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:28:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x20000000}, 0x0) [ 2244.405623][T25287] usb usb9: usbfs: process 25287 (syz-executor.4) did not claim interface 0 before use [ 2244.419250][T25287] loop4: detected capacity change from 0 to 264192 [ 2244.428096][T25288] MPTCP: kernel_bind error, err=-98 [ 2244.428654][T25289] MPTCP: kernel_bind error, err=-98 [ 2244.479445][T25291] usb usb9: usbfs: process 25291 (syz-executor.4) did not claim interface 0 before use [ 2244.495852][T25291] loop4: detected capacity change from 0 to 264192 [ 2244.544689][T25293] device batadv0 entered promiscuous mode [ 2244.567078][T25293] device batadv0 left promiscuous mode 13:28:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x26c, 0x381) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) [ 2244.638967][T25296] device batadv0 entered promiscuous mode [ 2244.665118][T25296] device batadv0 left promiscuous mode 13:28:58 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd605, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x53, 0x1}}, 0x0, 0x0, 0x0}) 13:28:58 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd605, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:58 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x38}}, 0x0) 13:28:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x25000000}, 0x0) [ 2244.781375][T25305] MPTCP: kernel_bind error, err=-98 13:28:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x64, 0x1}}, 0x0, 0x0, 0x0}) 13:28:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0xfa3d) [ 2244.782096][T25306] MPTCP: kernel_bind error, err=-98 [ 2244.937335][T25316] device batadv0 entered promiscuous mode [ 2244.967407][T25316] device batadv0 left promiscuous mode [ 2244.992636][T25317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2244.996197][T25320] MPTCP: kernel_bind error, err=-98 13:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x48000000}, 0x0) [ 2245.014443][T25322] MPTCP: kernel_bind error, err=-98 [ 2245.060224][T25314] device batadv0 entered promiscuous mode [ 2245.073011][T25324] usb usb9: usbfs: process 25324 (syz-executor.4) did not claim interface 0 before use [ 2245.085330][T25324] usb usb9: usbfs: process 25324 (syz-executor.4) did not claim interface 0 before use 13:28:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1}}, 0x0, 0x0, 0x0}) [ 2245.109676][T25314] device batadv0 left promiscuous mode 13:28:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) [ 2245.138937][T25330] MPTCP: kernel_bind error, err=-98 13:28:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4c000000}, 0x0) 13:28:59 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe603, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:59 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe603, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:28:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2245.139461][T25331] MPTCP: kernel_bind error, err=-98 [ 2245.282991][T25339] usb usb9: usbfs: process 25339 (syz-executor.4) did not claim interface 0 before use [ 2245.300491][T25339] usb usb9: usbfs: process 25339 (syz-executor.4) did not claim interface 0 before use 13:28:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000480)={0xa1, 0x5, 0xfffa, 0x94f9, 0xd7, 0x7fffffff, &(0x7f0000001900)="5c288f9a5c15e40a681a26f1dfff99fba18d8f6647582e9b9404d28b94915957b553fe70196f5e6c9bce4fa9c9bfaf19ed89f93c1bcf5b88466d46aaa1b74ebecc5303744500c364b3d55bbab6256b5acb9352a17e6cf101d9ec4a6af90cef0b88915aec43138aac3fa44391b9465843468a911ccfe108bc6dc1869f2faee261b352fbebae032f31cef2743482c1e731fb7973df89f2113b31135d415a744bb56f69c3b3051f762daacafec06727a5adc66cfd4e468fa6e89f464080914ab1dfce1d0ecacb30f3a6953f918bb3e34446dd4b108abb07d8"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000001a00)=0x1) openat$cgroup_ro(r1, &(0x7f0000000500)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000380)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x3, 0x1, {0xa, 0x4e22, 0x10000, @mcast1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="a38f621e3438aa9097b387f70f3431dfb4c78a2fc3084922ad5ffe4f8a36bccef7a616aae80bd8000cfd25c33b56c967acce357a3912377c5bc8166878cdd672", 0x40}, {&(0x7f00000002c0)="acc601b8cd6469320258bcb772b761f7", 0x10}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000300)="67b415a406ded7d2dc7c860b0a63", 0xe}], 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x360}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x1f, &(0x7f0000000100)="d5101e1419858adf05e5d25781af2a59a7336c99372d6f87834223777750910db6ae755ec85ba301a5cea236f35f2b2bc3ba112a5ff2e1c69ba73a1e0a05dacb77ac27239b607ea864771244fa4a2333a06a822af317ca62c2d95e014c39c2b9aa8b61900ff28301417d60626d3ad7534e9d9e8fab02f97014a0daca93ec055cc481f6b545799bb595f3f1dc552f9121f5192758d1fd703617bf2cb6075724813137c3cfa67d35f0249c26889335d81834d3889b2d06d1a5dd1c104bd784bac9c11080573fde676a79054a4c"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(r6, &(0x7f0000003cc0)={&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/15, 0xf}, {&(0x7f0000002b00)=""/99, 0x63}, {&(0x7f0000002b80)=""/214, 0xd6}], 0x4, &(0x7f0000002cc0)=""/4096, 0x1000}, 0x18003) recvfrom$phonet(r5, &(0x7f00000003c0)=""/106, 0x6a, 0x10000, &(0x7f0000000440)={0x23, 0x0, 0x4, 0x4}, 0x10) [ 2245.342778][T25343] MPTCP: kernel_bind error, err=-98 [ 2245.343247][T25344] MPTCP: kernel_bind error, err=-98 [ 2245.390371][T25347] device batadv0 entered promiscuous mode 13:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x506f0000}, 0x0) [ 2245.435148][T25350] usb usb9: usbfs: process 25350 (syz-executor.0) did not claim interface 0 before use [ 2245.457414][T25352] usb usb9: usbfs: process 25352 (syz-executor.4) did not claim interface 0 before use [ 2245.459361][T25347] device batadv0 left promiscuous mode 13:28:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x2, 0x0, 0x0}) [ 2245.475052][ T24] audit: type=1400 audit(1636637339.457:812): avc: denied { read } for pid=25351 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2245.476117][T25352] usb usb9: usbfs: process 25352 (syz-executor.4) did not claim interface 0 before use 13:28:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setpipe(r1, 0x407, 0x9) [ 2245.572278][T25356] MPTCP: kernel_bind error, err=-98 13:28:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x3, 0x0, 0x0}) [ 2245.572875][T25357] MPTCP: kernel_bind error, err=-98 [ 2245.601171][T25359] usb usb9: usbfs: process 25359 (syz-executor.0) did not claim interface 0 before use [ 2245.630778][T25349] device batadv0 entered promiscuous mode 13:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x60000000}, 0x0) [ 2245.706622][T25349] device batadv0 left promiscuous mode 13:28:59 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x801, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x801, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x801, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r14, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:28:59 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xea03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2245.773908][T25364] usb usb9: usbfs: process 25364 (syz-executor.4) did not claim interface 0 before use [ 2245.784763][T25363] usb usb9: usbfs: process 25363 (syz-executor.0) did not claim interface 0 before use 13:28:59 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xea03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2245.817276][T25364] usb usb9: usbfs: process 25364 (syz-executor.4) did not claim interface 0 before use [ 2245.834849][T25374] MPTCP: kernel_bind error, err=-98 13:28:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4, 0x0, 0x0}) 13:28:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x36048000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="080027bd7000ffdbdf25030000000800030007000000380001800500028081000000060001000a00000014000400fc01000000000000000000000000000108000300e00000010500020008000000080003000000000048000180050002003f00000014000400000000000000000000000000000000060005004e21000008000600000000000500020000000000080006000100000008000300e00000020800030001000000080002000300000008000300020000000800030003000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x100}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x40040) 13:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x68000000}, 0x0) 13:28:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000100)={0xffffffff, "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"}) [ 2245.835456][T25375] MPTCP: kernel_bind error, err=-98 [ 2245.956215][T25379] device batadv0 entered promiscuous mode [ 2245.985758][T25379] device batadv0 left promiscuous mode 13:29:00 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xee03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2246.091487][T25381] device batadv0 entered promiscuous mode [ 2246.116061][T25381] device batadv0 left promiscuous mode 13:29:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x5, 0x0, 0x0}) 13:29:00 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xee03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2246.166165][T25385] usb usb9: usbfs: process 25385 (syz-executor.0) did not claim interface 0 before use [ 2246.214337][T25391] MPTCP: kernel_bind error, err=-98 13:29:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x701, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r4, r3, 0x0, 0x100000001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b0, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2000}, 0x600008c1) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd0, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1f}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0xff3c, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6c000000}, 0x0) [ 2246.215259][T25392] MPTCP: kernel_bind error, err=-98 [ 2246.239948][T25393] usb usb9: usbfs: process 25393 (syz-executor.4) did not claim interface 0 before use 13:29:00 executing program 4: syz_open_dev$usbfs(&(0x7f0000000080), 0x87, 0x2c1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000140)=""/131, 0x83}], 0x2, &(0x7f0000000240)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2c0000eab607067c5258930001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}, {{&(0x7f0000000380), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/251, 0xfb}, {&(0x7f0000001500)=""/249, 0xf9}, {&(0x7f0000001600)=""/171, 0xab}], 0x4, &(0x7f0000001700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/232, 0xe8}], 0x2, &(0x7f00000029c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000002a80), 0x6e, &(0x7f0000003b80)=[{&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/1, 0x1}, {&(0x7f0000003b40)=""/32, 0x20}], 0x3, &(0x7f0000003bc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}}, {{&(0x7f0000003d40), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003dc0)=""/40, 0x28}, {&(0x7f0000003e00)=""/127, 0x7f}, {&(0x7f0000003e80)=""/170, 0xaa}, {&(0x7f0000003f40)=""/163, 0xa3}, {&(0x7f0000004000)=""/171, 0xab}], 0x5, &(0x7f0000004140)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004180), 0x6e, &(0x7f0000004300)=[{&(0x7f0000004200)=""/194, 0xc2}], 0x1, &(0x7f0000004340)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000004480), 0x6e, &(0x7f0000004840)=[{&(0x7f0000004500)=""/71, 0x47}, {&(0x7f0000004580)=""/239, 0xef}, {&(0x7f0000004680)=""/162, 0xa2}, {&(0x7f0000004740)=""/204, 0xcc}], 0x1f, &(0x7f0000004880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004980)=""/173, 0xad}, {&(0x7f0000004a40)=""/213, 0xd5}], 0x2, &(0x7f0000004b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x9, 0x40000020, 0x0) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0xfffffffffffffee0, 0x0, 0x0}) [ 2246.286989][T25393] usb usb9: usbfs: process 25393 (syz-executor.4) did not claim interface 0 before use [ 2246.338312][T25400] usb usb9: usbfs: process 25400 (syz-executor.0) did not claim interface 0 before use [ 2246.349786][T25397] device batadv0 entered promiscuous mode 13:29:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6, 0x0, 0x0}) [ 2246.384728][T25397] device batadv0 left promiscuous mode 13:29:00 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf200, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x74000000}, 0x0) [ 2246.458194][T25401] device batadv0 entered promiscuous mode [ 2246.485657][T25401] device batadv0 left promiscuous mode [ 2246.494293][T25404] MPTCP: kernel_bind error, err=-98 13:29:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000500)=0x6e) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000540)={0x0, 0x2710}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000075232828df8bba683dd767d084a12207a82b65", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000580), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r5, r4, 0x0, 0x100000001) recvmsg$unix(r4, &(0x7f0000002e80)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000002dc0)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/212, 0xd4}, {&(0x7f0000000a40)=""/172, 0xac}, {&(0x7f0000000b00)=""/248, 0xf8}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/88, 0x58}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/110, 0x6e}], 0xa}, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r7, r6, 0x0, 0x100000001) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x114, 0x0, 0x200, 0x180, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ad}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x781}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x0, 0x9, 0x1, 0x16, 0x48, 0x24, 0x36, 0x30, 0x16, 0xb, 0x48, 0x1, 0x48, 0x1, 0x16, 0x24, 0x24, 0x30, 0x60, 0x2, 0x48, 0x30, 0x18, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x12, 0x18, 0x30, 0x16, 0x16, 0x48, 0xb, 0x24, 0x9, 0x48, 0x18, 0x16, 0x5, 0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x3, 0xe, 0x1b, 0x6c, 0xb, 0x48, 0x3, 0x48, 0x48, 0x36, 0x6, 0x30, 0x18, 0x24, 0xb, 0x53, 0xc, 0x21, 0x60, 0x24, 0x18, 0x1b, 0x30, 0x48, 0x1b, 0xc]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xda}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5b17}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfe}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x4}, {0x12}, {0x4, 0x1}, {0xc, 0x1}, {0x6c, 0x1}, {0x5}, {0x3}, {0x4}, {0x5}, {0x32}, {0x9, 0x1}, {0x24, 0x1}, {0xb}, {0x9, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7ff}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x40}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) 13:29:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000000)) sendfile(r2, r1, 0x0, 0x100000001) read$usbfs(r1, &(0x7f0000000100)=""/202, 0xca) 13:29:00 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf200, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2246.499531][T25405] MPTCP: kernel_bind error, err=-98 [ 2246.655597][T25418] usb usb9: usbfs: process 25418 (syz-executor.0) did not claim interface 0 before use [ 2246.682190][T25420] MPTCP: kernel_bind error, err=-98 13:29:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7, 0x0, 0x0}) [ 2246.683948][T25421] MPTCP: kernel_bind error, err=-98 [ 2246.725770][T25419] device batadv0 entered promiscuous mode [ 2246.766031][T25419] device batadv0 left promiscuous mode 13:29:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7a000000}, 0x0) [ 2246.773333][T25428] usb usb9: usbfs: process 25428 (syz-executor.4) did not claim interface 0 before use [ 2246.786576][ T24] audit: type=1400 audit(1636637340.777:813): avc: denied { ioctl } for pid=25425 comm="syz-executor.4" path="socket:[540652]" dev="sockfs" ino=540652 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2246.787012][T25428] usb usb9: usbfs: process 25428 (syz-executor.4) did not claim interface 0 before use 13:29:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e30}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x304, 0x0) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x400}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000000c0)={0x7, 0x1, 0x1, 0x0, 0x0, [{{r0}, 0x3f}]}) 13:29:00 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf602, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2246.885473][T25431] device batadv0 entered promiscuous mode [ 2246.909990][T25431] device batadv0 left promiscuous mode 13:29:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x9effffff}, 0x0) 13:29:01 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf602, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2246.973631][T25438] MPTCP: kernel_bind error, err=-98 13:29:01 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x8, 0x0, 0x0}) [ 2246.974029][T25439] MPTCP: kernel_bind error, err=-98 [ 2247.023802][T25445] usb usb9: usbfs: process 25445 (syz-executor.0) did not claim interface 0 before use 13:29:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004081}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:01 executing program 4: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) fcntl$addseals(r0, 0x409, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="cc0009bcc10000001500000004000000f30200110200"/288], 0x120) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) [ 2247.161003][T25451] device batadv0 entered promiscuous mode [ 2247.185103][T25451] device batadv0 left promiscuous mode 13:29:01 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf603, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2247.250564][T25454] MPTCP: kernel_bind error, err=-98 13:29:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xa7ffffff}, 0x0) [ 2247.251244][T25457] MPTCP: kernel_bind error, err=-98 [ 2247.299820][T25455] device batadv0 entered promiscuous mode [ 2247.335129][T25455] device batadv0 left promiscuous mode 13:29:01 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf603, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:01 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x9, 0x0, 0x0}) [ 2247.427018][T25461] usb usb9: usbfs: process 25461 (syz-executor.0) did not claim interface 0 before use 13:29:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1000005, 0x200c3) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x7}) [ 2247.527774][T25472] MPTCP: kernel_bind error, err=-98 13:29:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xefffffff}, 0x0) 13:29:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x9) syz_emit_ethernet(0x22, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @random="0a3180ebf5a6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "bc43903d157cb873"}}}}, &(0x7f0000000100)={0x0, 0x1, [0xf14, 0x4aa, 0x2bd, 0x1f8]}) pivot_root(0x0, &(0x7f0000000480)='./file0\x00') r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020200000800030000000000"], 0x38}}, 0x0) [ 2247.528329][T25473] MPTCP: kernel_bind error, err=-98 [ 2247.574236][T25476] device batadv0 entered promiscuous mode [ 2247.604797][T25476] device batadv0 left promiscuous mode [ 2247.664883][T25479] usb usb9: usbfs: process 25479 (syz-executor.0) did not claim interface 0 before use 13:29:01 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xa, 0x0, 0x0}) 13:29:01 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfa03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2247.718001][T25482] device batadv0 entered promiscuous mode [ 2247.746250][T25482] device batadv0 left promiscuous mode 13:29:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {0x2, 0x1}, 0x9, 0xe1, &(0x7f0000000000)={0x0, 0x15, 0x5, 0xffff, 0x2}, 0x8, 0x3, 0x7, 0x0, 0x3, 0x800, &(0x7f0000000100)="8985ef7b3bf9c91df51d195610ccf83dcf626895bfbf6ca251d59852bb9df237b3edb6620ce22ab0448be502a9cbd447b9ae2c2e2ef0a79f14cc833ce1bbd52ad42b0d3e9486b5a8a4206bce8e773ea6634ae9c9f51b0742f157611327513b410b243d802ffdd6bd179a44fca6fd1de876c1307a9933aab337bd9b60cf03857d8b99e8746bf271b67daf13b7a7997f162368841e199158f4a2d2396e973a325194797e12f54e43bd4464d2ba84dc76171198b2a759e94280accdcc634e7b2880cac133"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) fstat(r1, &(0x7f0000000500)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0xc}, 0x9, 0x45, &(0x7f0000000200)="3201d4b3eef4a24c36276a95ffa028d53aadb523326e09e579b1254d32b66f5560b9734eb81a373b21a7609c1c211b36087dedf8c25bf5c9810b96eb709f7cd1a5f3eb27fb28349e1c4ea8281bf3bc39aaac6b1e3e17e899274080d4c2081501807bdd1fb64d02e500658919eb41a84279b65d505d7ac0e78b2a155fced7be63f11d0d1aed1369ebdc2dafdd34b39cff16819dc51ccf6ef9ee654c1f2e4bb05385519b7167c9426829ec", 0xaa, 0x10000, 0x7f, 0x23, 0x9, 0x20, &(0x7f00000002c0)="18e57645b739aa0af96271dab318473ad6c1596c3883b67cdb6674a34b9bc624eb074f62724cbf", [{0x6, 0x4, 0x1000}, {0x20, 0x0, 0x1}, {0x9, 0x1, 0x9}, {0x9, 0x10000, 0x1f}, {0x9, 0x5, 0x1}, {0xcf, 0xfff, 0xffff}, {0x2, 0xc5, 0x10000}, {0x6, 0x5, 0x80000001}, {0x400, 0x6, 0xffff55a9}, {0x8000, 0x8e58, 0x8}, {0x8, 0xfffffffd, 0x8001}, {0xc062, 0xff, 0x8}, {0x4, 0x8, 0x4}, {0x3, 0x10000, 0x6}, {0xb6, 0x40, 0x4}, {0x7fff, 0x1, 0x3ff}, {0x45, 0x4f, 0x3}, {0x772, 0x3, 0x4639}, {0x9, 0x0, 0x4}, {0x0, 0xffff, 0x1}, {0x7, 0x5, 0x4}, {0x4, 0x1}, {0x8, 0x892f}, {0x8, 0x2, 0x80000001}, {0x9, 0x4, 0x6}, {0x5, 0x3f, 0x8}, {0x7, 0x5, 0x3}, {0x1, 0x4, 0x800}, {0x10001, 0x5, 0x4}, {0x43, 0x9, 0x7f}, {0x9, 0x7264, 0xffffffff}, {0x156, 0xffffffff, 0x4}, {0x7f, 0x2}, {0x800, 0xc6, 0x8}, {0xbd52, 0xeb80, 0x3}]}) 13:29:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0xfffffffffffffe6e) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0x3f]}, 0x8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000d3d0e0a0434cae00000001000000240001800800060005000000060005004e2000000600010002000000080003000000000084d55d0fb5c955ce1bfccfaa490e6d64a25fc2237e0f4c9b02000000000000002d4517431ef5192b3237960e46851bad1a87a63e70221e7f02f44e148245b78f3420b852e6e0"], 0x38}}, 0x0) 13:29:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xf0ffffff}, 0x0) [ 2247.881002][T25488] device batadv0 entered promiscuous mode [ 2247.894516][T25491] MPTCP: kernel_bind error, err=-98 [ 2247.895131][T25492] MPTCP: kernel_bind error, err=-98 [ 2247.903541][T25488] device batadv0 left promiscuous mode 13:29:01 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfa03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2248.013530][T25498] usb usb9: usbfs: process 25498 (syz-executor.0) did not claim interface 0 before use 13:29:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xb, 0x0, 0x0}) [ 2248.057697][T25499] device batadv0 entered promiscuous mode [ 2248.067068][T25500] usb usb9: usbfs: process 25500 (syz-executor.4) did not claim interface 0 before use [ 2248.092261][T25503] MPTCP: kernel_bind error, err=-98 [ 2248.092929][T25504] MPTCP: kernel_bind error, err=-98 13:29:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xfeffffff}, 0x0) 13:29:02 executing program 4: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/23, 0x17, 0x1, 0x7}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x681) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2248.098020][T25499] device batadv0 left promiscuous mode [ 2248.109232][T25500] usb usb9: usbfs: process 25500 (syz-executor.4) did not claim interface 0 before use 13:29:02 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfe03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2248.208618][T25506] device batadv0 entered promiscuous mode [ 2248.234866][T25506] device batadv0 left promiscuous mode 13:29:02 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfe03, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100100024000180080006000500000006002d004e20000006000100020000000800030000000000"], 0x38}}, 0x0) 13:29:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xc, 0x0, 0x0}) [ 2248.351732][T25515] usb usb9: usbfs: process 25515 (syz-executor.0) did not claim interface 0 before use [ 2248.375200][T25517] MPTCP: kernel_bind error, err=-98 13:29:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xff0f0000}, 0x0) 13:29:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x0) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2248.375637][T25518] MPTCP: kernel_bind error, err=-98 [ 2248.397618][T25519] usb usb9: usbfs: process 25519 (syz-executor.4) did not claim interface 0 before use [ 2248.414680][T25520] usb usb9: usbfs: process 25520 (syz-executor.4) did not claim interface 0 before use [ 2248.529113][T25522] device batadv0 entered promiscuous mode [ 2248.553497][T25522] device batadv0 left promiscuous mode 13:29:02 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfeff, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000040) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4048000) [ 2248.697048][T25529] device batadv0 entered promiscuous mode [ 2248.724814][T25529] device batadv0 left promiscuous mode [ 2248.738386][T25532] MPTCP: kernel_bind error, err=-98 13:29:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xffffff7f}, 0x0) 13:29:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xd, 0x0, 0x0}) [ 2248.738987][T25533] MPTCP: kernel_bind error, err=-98 [ 2248.739593][T25534] usb usb9: usbfs: process 25534 (syz-executor.0) did not claim interface 0 before use 13:29:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000aa2905ac785600000600b29c0d6666696c65300441da15f4395a214affee1d88dbdf4e82"]) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x46, 0x96, 0x20, 0x7f, 0x3, 0x3, 0x8001, 0x293, 0x40, 0x399, 0x9, 0x0, 0x38, 0x2, 0x4, 0x7fff, 0x8}, [{0x7, 0x4520, 0x24f6, 0x4, 0xffffffff, 0x6a74, 0x5fb, 0x7}], "bb740d10345a2e84d02f28aceaa86642b3b832150f5d517a721ce9195dc79be40466b67d6557c497f705a19f5f8a02514a176474cf57a0fc7a5278ef125b81999177db60446fd7955644f77f99497e4327cf896e960a3c518b8440f19edd3a1355f9f7b92642224e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9e0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r1, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:29:02 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfeff, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2248.902607][T25541] device batadv0 entered promiscuous mode [ 2248.911525][T25542] MPTCP: kernel_bind error, err=-98 [ 2248.926646][T25546] usb usb9: usbfs: process 25546 (syz-executor.4) did not claim interface 0 before use [ 2248.926967][T25545] MPTCP: kernel_bind error, err=-98 13:29:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r1, r0, 0x0, 0x100000001) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x2, 0x2, 0x81, 0x2, "270b5d608e66aedde6749a6311de5625aca9445dffd37559539e123350ecd28e82756d1fd7cfc613ec2f233843a2097fc4d047222b8092c3498349de40ee5c", 0x35}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)="409e2390f1aeec0d299460b9c60a88dc821b2d6b8186b296d27129eb47d25c68db454d192052be4cae36d5576f7152ffe2e0afbf4b12163a39aee8017b36d8382d03175f751aee924a733ba1f734ab75f758809ff59c5e8cd48bb6a8b184e54144bb2468f269bfe316be0c0b1285964d8d8f3008e2eab85dee0d81fc9c6e9810501f95f257bbd180ac2b0d952e3e", 0x8e}, {&(0x7f0000000240)="7ecf6eca2cd8099120160f64091df1079e39dd3ab4463e2ef0bd22e2c955e4ffe62fc9b1bc06e1ab10a9f7c4e62998f6b91b254371ef4102d8867aaaed8b019594d7a4aab1a29798ed091a42357719b5eac5da65dc55286a733086c32d6c6c5399b71eb80a3ffdd690a87d57d0bfece4d1feb6647eed8aa0ef97883e10778405096bcb25d4a1da38c94c0aa7bd37d028dadb522b72149f4716ba262a7f7ace5e66306560941e8ffb0caf4e7a28f84b7327cb74cfd4f1b083a8eaf4ca6e90c7e3f40d8012250b8783838602eb23da97a5efe9c8f863c6494e2a712c27adc8c8967efe7ad4", 0xe4}, {&(0x7f0000000080)="3ca8a221c56bd095f846a9cdedc0fd594672327564be3887990416266f20fdf1a6fc09f68b7f3a8884ce392f48", 0x2d}, {&(0x7f0000000340)="76f8694df4da7a1b5bc1f5b3f58e0a0ac3dd2c19912bb139fc0762a0575dc439d204b36ec0de0b3803f2fdecf0170620b1f64357f91cadd0668f2dce0960872425cdfdf908c96e2a16afc9d0680a6718e5e487379a006dd046b3264ba9050870106f22958afa1498588d7726c2c2de7cf04fcd7dfdd87489625b2f18746931a1aead239fa8baf087bdfb685dc89891ec6e0e2aa7564eb7be7068e6f435a8b74a108ecff8d1c3063939d07d0706b98b50b6115809a3a1fdd1660684fe2efe32351ce43c4c0d74ff5cb3d35a6b4eabf999bb", 0xd1}, {&(0x7f0000000440)="fe8315a30de4971ecd922e236311ff1192186ab275a805f4e004fb37072f74adac3df7658bb1648c405eb34865e29d002b37f431e1046d2ecca78bb25c2da01ad1da1cbfd68029e71db47120c9cfe83e9f27783fc92c10458b0fbab24754004fdd59ef5b5798e454a8c198b24cbf8b7296dbab924f36fdf8fbe16a18453cdc610226ba75c84f8d0485af499609a3076a00f0e56db6757dd707b0e7b480b967e77cb4930a5173b2ba98b203e15576c9776b88d90a1d3900d9", 0xb8}], 0x5, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x200, @remote, 0x2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)="378e2586dd634b41af769f40387952740a3d49f8b2ec222a301360793a8b63ddda401dd5c8d1b47f", 0x28}], 0x1}}, {{&(0x7f0000000700)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="ebe5892405cf9921cacc669192f0dadcce5ac7c89aa2b23dd4fbfec993e1adc96bf1aea96fbc718572fafe058869012579c9650e15e089606ebe5474a5b23eaf55b517f1d0632f60886646f7d9b3e111ae8ad13c7d411636bd0382928fba0c7335bd9896b22ae1751915d435cceab9b9332828c588ec96fc4e60a2d29ed2b5d799cec393185840994b07093a513c27968cb1d12e434ae9553b523ed9a236a7e1e7d62fee429301bf7e7430a407e5b6fdfd4e9521dd2a0878825f49a46371337b0ccb966e8fa4875e0aea47", 0xcb}, {&(0x7f0000000880)="87192207969ef9cc02249feced1e6f4fb950da1df68ef037c2dcf0327fa06a3633b8000b313d41c59dae5847248e54216a9037fbc6e0190e6be1de976174e381021b0737f2fd2462826c7c351b128b2cac53f287594bde3db097d5f3c891f8b645bfc87d83c61321311a8a67da0201c070", 0x71}], 0x2, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0x6eb21af3}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="189760a5203704af83dc5c735cbf0ef1f30e865fa1e4f07f320eb9830581b5e4442ee1a208636a511e75630b659e3eaba777974303eba46a816472eeb4", 0x3d}, {&(0x7f0000000a00)="1239e240d7ed22383f4ae852d61fd3b04a763c567ce18bbc667064e5ca49b5e77b7c2a3df7fca845c6aa4584361f4899c2c05fe3b45f15cdff3fe188ddb7729f3e85fa6e260be06baf58e4c7f2b849fb8feb628f31f546f811ebc427d4c3ed2cd0d6353acd18d28061b829cd15e2051ce93db3886a314e4f816a09eb4037424c99109202127e5dccdc22f332bfd29d5247eee1cea6b4b323e7591f42b70f2af1fc72376030abb7809f6253d842b2a7dfd5036d3aab4c985e", 0xb8}], 0x2}}, {{&(0x7f0000000b00)=@l2tp6={0xa, 0x0, 0x1, @private0, 0x4, 0x3}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)="eece0a1ccb7c8077660884642a4df1a4acd71f911a613e44b2ed3617ad16a901732b7bfc36026e0c30dddd3adc9e867b30ee432b3139ffefd03c65d367a82fac750880e88949b525648c108b48cb457599988cab53364be4cadccc0f96ce5e1c5f7909174f7789320dc8681d059b3d648cf0b3b620015bf5", 0x78}, {&(0x7f0000000c00)="47c942874d962e14b5354c4bbb0d60933339dafcf50f3a5a49b1edf6a553357ede318a05fb6d83c03ca5868c7bf328fb9c6ea2d668a372a0", 0x38}, {&(0x7f0000000c40)="457139fd", 0x4}, {&(0x7f0000000c80)="ce171db640e9c1af0a602f3820606e10ebe6dbe7645180f8d4c79f54b95bee84cd2110d65e1ab85cc013c1b49acfaf8fce9a79c13af8d49d49a0eda0441b47d4f18ab15a65c2c56f33fea350e05aef666a5f71416c51d030edad9a02cee28766eabe223dd34dc29696cc7909acede83f9b2eca4ec90ccae33947a1dae70fcabe67af", 0x82}, {&(0x7f0000000d40)="4aef846e52964f755d9dd7162b0c08e86440f67b3dc4abc32df57cc7fd532f1c9d0d60377a7ac56ce4307ae8edd3806bdea856fa1f00ca51cb54c26f1da1d77aa4aa9fd91495d8bbaf26690182d235e8053389e696c1f764dc74bff5406c5af405a4fe996872cf912d7b877651af40f2b9df853e484cdad7dc5ab23ca2154a2b4f57fcda43ca6ba8248b01ee7d70017e33a20bab9a4c92c75255b508fcd2a00e39146e25a59dd58e8774c0042ed93aa474fcbd79aa51743c0500fede4f0483ac7a3017eae3b17fa3579aa4a1cdada58c259563c27bec841e870ea28951b891842361fb22e920d162fe8e3ee68920751616006a766bd0e74458", 0xf9}], 0x5, &(0x7f0000000ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x31}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}}, {{&(0x7f0000000f40)=@caif=@rfm={0x25, 0x3, "cc302757426d6baa2b4faeb86f9f7c2c"}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000fc0)="23e961fefb6715aac40650dda78ca7f348ea4e8f1ba6d6e49ec8e5d13e8e17ce99aef7dab6d18f7d3e0bfa4e08ef243f056bda04e79f58da4a7d324e9ca1c44ae593b029490908", 0x47}, {&(0x7f0000001040)="561543f5e1f6efa12f06fde26f5958cfbda2a4efedce883b139e153369ee5666a8ac25fb8c30b1fe0c0cfa58eb0264caf9d3536db8ffc6009c5dfbe119834af49d7970d974a3d447f2772337b5345c5b1dafffc4d968bbbe84ed8e4ed49fc3f1b30de58c97fa8965391de2041c36c2c13e", 0x71}, {&(0x7f00000010c0)="835b60f7607f90ce72c17e371f6bb6f4e8071b17166cc9fae03d8950fe9abe5705c632ce29f3c06bfa743b343920829d4b7c15fad1862ce4351e6a11f471afb78e41008fa97d7811444e3c1985d955e5c3", 0x51}, {&(0x7f0000001140)="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", 0x1000}], 0x4, &(0x7f0000002180)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x6e}}], 0x48}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002200)="8870ab37c7846008340429a63d115551b434cda82696a7a38c506bada000cc505c64a40d975c9ae2301c3aa3c46dd5b9963ee93b8f61175e40cb17c2e5a466d6757af8c8a0fc8ed246450ae51f05532d6f79672d3927d38bcf4b189b89a668f331d35758319683fe27fe3674eee27b7d97b45c16b1d3ab5921a069c94fbbb5b2ba2c420dcec4bd381c78a499246b7b1cf01d98311fda8c9c3a50cf6cce9b38f9ece78ac60c96b7a85d2799238ae8d40a", 0xb0}, {&(0x7f00000022c0)="542743e68e827ca0cdfa5a190ec5cf67725c713116300d6032d5bb23c26c4f4bd7954179dc528d9a7fdb2adb7d18a97609655ddab85a8065a05474682139d6e6e9a543418435fe146bfe033c13a76713687bcd550a3c6abdbe52e4d9420dd81ae3f1c52e551b016f33a1aa849970b7890c5967d458aab2da430a2bd169a347099df2a4f0c679fc589a49bada2dd5f19aa085e7748b555d21822293eafb2968a38a88e5a0f0f6f5d1d10765e4f19fe33e48d6439c7efcc8cdcf14eb9e94ad874ea4d88cb72ad6ac9edba77219904be245c502939a4abe6c94d834b6d0e99b9274426bbb5cffb1fa60cb", 0xe9}, {&(0x7f00000023c0)="7d7b2f1d7cebb9fbc2726c40787c1d6926", 0x11}, {&(0x7f0000002400)="49a061126e62536f3ca857b5ff3193e53c65bca745a3e72b015b1e8c60a06d2d34c44a050069f01d53a255b858353257e4c0c2caaaf82cf9970748f52580ace533c31e02b916ccca923bc764bd209bea0cc8e502c01244139ed74cdebebc85de", 0x60}, {&(0x7f0000002480)="e9acc5d2a6cc4480f40e295e0045645caa0dbcf18d165752cc7067169febe62da999c733dfa17ebb9779e35db2d407a52079cb92104e0339d70aa52de5697343bbef473674d62e4243736bd5a06b0ee9eed5f41f9c0ee25cb699256c8b65de7ee629ce67756dcfe13cfbf85295e500726fe747105063497c2cafcf341ed52719f2da15d52e7a7c9a8d4663945a143ef98da344bbdf80d155c281f6e35c56a3bf44ca0e8a08c91fe5119af9220191df245f396c98c75d1f24d54cb38daa970f1116c8e50cb07a", 0xc6}, {&(0x7f0000002580)="468ce37bfbf9828221790e8942be1d71a976ce6477be4d5f05fac798c7333f42e10c0b72f1c97bc75fe0aff0547b0fd1967609f01150af74853cb2110df9f05aa48d23f73a2135dc1aba26047b886743605d74369686dd38fd9a5770694032cfe41add200448c1e503192dd43315e6ddd04fca47581849295677dffd0e523f4d7e71b8956036c84ef85905f4c7ba0785514c86b891313d3f09d664533db966f52750ae78e5ccb2d690dca8ab8099a14adf4302f08789f139e8e39fab991d24a902a069d5a3bc9ba447383757510d6796b6", 0xd1}, {&(0x7f0000002680)="e2fadeea8499158ce6e5b5466264342c3399403d4192db5a1db5be79bf21", 0x1e}, {&(0x7f00000026c0)="1e974f35e60b746ed039b4202ff952ac2aaa5cd4357ae4e5318efa6cd80125e6b75682331cd9d98bd7d09bedd8944a5031b910d1723a4014e59c660d8b6c551353dbe929b24fec98ac300f022a5b4555cef7f5176d67b46d2c8551fb12ba58bc842635460bd879a6d040c07993b558f7595187312994ef78b136575091ff10e4234a7bfbd0e4c010fa7aa4fd6c3ad70f3d1b093c9a8b7dd45b31fd090350689926207514caffd23847af15aeaf4dcb1deedb4afcfa647baa9085d75d3eef9a5f12754c9dc4bc4a2a3c311a2d3df6d6f82caa6a047af4eeaed3f4", 0xda}], 0x8, &(0x7f0000002840)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}, {{&(0x7f0000002880)=@l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x401, 0x2}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002900)="6a0ba9084929fef1b97212b62dc84d8d7e9646376ebdebfce883554dce7ac51d8571a964f46180bfd45d01331664df44f9c6eefb59abe09a5191d035ebee0f76831e5c7b045ffaf6365f308dfe3538b21556c27aad0cbc817dc28fd4f25566e5c0db241ee2717efecbdede8db6513f0648ae54951a38c442ea3647f82c1644b8", 0x80}, {&(0x7f0000002980)="c15c22b7f317645c04f1da5feaaa5caac0393b1fcc111b075c4b27bfb2a145eeac9976c5b6d58b2cfb8a89ce033b303acf7b5a9f8a107322e5e352fb27d8e5536acdbbdc606af23a5ff4e221f77966ca98f05f1019026af8844eee415601e2e4770340ee2073a008c4e609113571e4f17274c98c19a1278844e1a36b0bf18a43f773ddd638c4a01a48d566bd881147b45588e3cb48d1fd75023eb7b987766136f1d18ce194fe89ec2bf18b166a65bda901b501c8167583641f151143c9c993dc7be23f6126fcb6c6fc68842f4cb716fab698b91d74b558a7f8671dcc87e8fc6136e87d4571a2acbbe2801d00c2b9f555090414ff786ba4e0", 0xf8}, {&(0x7f0000002a80)="a8c13a64882e20f2085f2fc2cb91485dd0548ac9bd38d641bf1e01a3d1b11744b649145cac9759e56b2fcf3b774cb21a1fb5c90eada319c5fc16b1e74685b70fb004494608b3764c9b6003a3287bdc3ca38358027a42e27ef134b0fbf14b43172d9cf24a4a8aa8eadab5176ea4", 0x6d}, {&(0x7f0000002b00)="0a4a939c6d624c5e71ec2976f0705e0c2987493ce4c3aabc78a2c751745362cf7fb507eceebea10363ae960290b4a7e7db0a26d503fe7fc514e5760ef34cfb6b62248cf15624a0a48010e42d0fbf74d903a156e36ab8874952a31901d2d74de2f9f7a86dc801eb24dcb092cca660071a059958611e43e096aad7e6c70fd5c0b5ab4a1d2f33d0f4d37a2ef5f7", 0x8c}, {&(0x7f0000002bc0)="453a85346359496a85d3d4d56cd7f66852b2a2882960e2d9008c5af100f7b68058d45472e645c198d037f67d3130cfe650f7cc9fd6d659a31667e8f15e0f69a219ffdf90ed2d8f1497c3c7f59074fdd7f716f9b39edb23eb3a8e8596", 0x5c}, {&(0x7f0000002c40)="9221f5fb0550c3d6659a7209980d00e325a202d7f89d0a83c6c8b7ecd11ecbf0f6543eab90814806d91215467756717bfa2d0f64b7840b601e4a468916ea3758a65df6589b5a57bb7a7d63cda0d0628497c8de5570", 0x55}, {&(0x7f0000002cc0)="5e90de16506e93413a3cc26306706959648ec4f4b0ecf2f5c8860e74864855df811463f4caa146b37ab8edeb81ec643bdec15da050ad147cc6c5a216e00db6a626abdf7cd45cca4e8c7a3c21ac5420045cd66878b7e223eb1573b0a042de650f4b329b48573a8bed08ab1c7b3564a442223a278910b8fc603bafa58b6a6d9cdd7bb645ed4f252a97ecb3d7dfc8010dbfd7e9880a95ad419087a2dcb9d5e5f632a314102e6cd594e86a7fb8505d3ccdfb15f49abd4862dce4b362757fc5c3899a1724b973ac69be1828dbec1634a435646931f78628486b7d0a150907b93d2462ccd528c72ebedb298aaa3259abc03782acb9ab", 0xf3}], 0x7, &(0x7f0000002e40)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002e80)="9cc565d19fbb7c16de3946f684f43d28ce458755ff74d2b5b8d57bed6aa15d5101f20d58b16b0c009bfab72a463ff5a883fa6ef4d870ab053f4170f3a3e061bc63a2cfc8ebe30b356c3b91558ac8a8c5b9ef9ec9130278c1a8dde64da6c6a197c418140683ad97ec589dd6b54a2a11d8cf01a2c4e9fe658f67feebb955b719047a4048fdec88b17d74268d2cb55efaeb4c98fdf50efcd2029351177d0190379ed6c228111d", 0xa5}, {&(0x7f0000002f40)="b777e9e59a43ccfc3b1d214079be1fa7fca24e8cbd3f185c3c87b6e8650a85226b4f1b36a5dc39a5681fa78ced0bfed87ad01ae9e537b20e960af59af5e7cd39fa909c1e57a3bbb220a0a3e5f786e423bd3a3e4295c995f7358945e79f1eec02d5", 0x61}], 0x2, &(0x7f0000003000)=[@timestamping={{0x14, 0x1, 0x25, 0xfe4}}, @mark={{0x14, 0x1, 0x24, 0xfffffffa}}], 0x30}}], 0x9, 0x20000050) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r4, r3, 0x0, 0x100000001) sendmsg$kcm(r3, &(0x7f0000003480)={&(0x7f0000003280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x2, {0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000003300)="fbd436e326ef8e9b1f", 0x9}], 0x1, &(0x7f0000003380)=[{0x40, 0x105, 0x6, "bfe166f0c11aeed8e6b3f2a59e1ca3d8b308942fd0125a7f64cb241ba762fdcf38ff803bf5c50a3a4b08d5"}, {0xa0, 0x1, 0x1e7cc412, "698ba121c4b13ce71d8dcd34c011baba664f40769bf889ea42ac4a661d8318d86eb1a1ed5ee1fb5303d236c63bd9fc2e2d44e0518ddab201b3b427bf35c7a4d2917db41b6f9212d3efbbb861e87d7aac76fe6370af234d716c0ed01b8c0eb6334eba1a9a95fb0b1fa32477e33a68f36ff17f9746fa656a09b3a0e3cb2fde6fe015d18dde62614044a9e7a7f92bc68a"}], 0xe0}, 0x800) ioctl$USBDEVFS_BULK(r2, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:29:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xe, 0x0, 0x0}) [ 2248.947110][T25541] device batadv0 left promiscuous mode [ 2248.962390][T25549] usb usb9: usbfs: process 25549 (syz-executor.0) did not claim interface 0 before use 13:29:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xffffff9e}, 0x0) 13:29:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYRES32], 0x38}}, 0x0) [ 2248.996971][T25544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2249.024364][T25551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:29:03 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xff0f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2249.133097][T25554] device batadv0 entered promiscuous mode [ 2249.156378][T25554] device batadv0 left promiscuous mode 13:29:03 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xff0f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2249.220601][T25557] usb usb9: usbfs: process 25557 (syz-executor.4) did not claim interface 0 before use [ 2249.242207][T25560] usb usb9: usbfs: process 25560 (syz-executor.4) did not claim interface 0 before use 13:29:03 executing program 4: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000011c0), 0x8, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) io_submit(0x0, 0x3, &(0x7f0000001280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)="8d957d73223ceb29988b54fd6baf4875fcc69c7431006cc2c8d17b4ec11245063f121646d6d43313c672d3e153fcad80c1c02464c59c45c7508cdcfd57e56ad1fababdde04876a1810f4a085fe5cb982b102b4623ebd", 0x56, 0x8000, 0x0, 0x2}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000180)="2dec74880052e1d444f67752abe6959b530fbaf11659f76ea77b129a7d7a44e42568df7c2333de53e7db3711a967dd8e2a49967bf3dd635484a0daba273ffbb06a4099b47967ad14fbc23fabba6ca4def86161b97427cfdde9ec3b65b0d0b0ce67f606686d29e61325468eeb3fb2c7a9d440c9374b25900690806b1db7ddf2ebdb5823f5bba134f6bf45ee342d2a1c1d23188c1970cdc4eb05552ad896e6d8e76f348d6a1dead92c252b334bbe92a86e57f9bbef19bca03666c89c18a9555722772222eb0ffd8e0b53481ddbd991d06ba91c638e78df7e210bc9d769254c471ed1fabdde31e85c92358641400014062347eaed59f3bbeae3ae0a7d081453749912ca0ca886421d7f88431e929df38ec26c69e139933a9deaaabc81c7ee0d13181f86d541cf80e861f9489dd64cba626171f39ca08edeed45a22752d20a33521f3a75b0b3fe0bb5d206268e399b2292ff82a006d48d7696da59dc14cc856c6d58932020978119f9605b9d08abf7c2a49f8a1f57eee6e8d55c1289b63e0f8d2333b7a55c56450158dec1aa1a0019c2fd9510533b5d5daf102676568ce9999833d0bd07e4bbf8dfadd9bc93338c3ad62a82cf172db930a70b6a47674a323cb0d9177bd46fcbf5c6d48fb9083ea881cd4fe04a83ba5577eb94dfede0caed4d2f1f66e81c3e9f79a1770a76093486b19a480dba452bbd4bf4b12d0d83475385065318398dc0c18d07815db68f5e7ab6941435be768fa9ee4d93a95b869b03fd6eee49804b6d69a4ab4a918a2fbbdd8070be15cd82c5927345551e65cf44851d8e9a5c8db1f87fa4be9a52238f97cd939bb1ec5bd0a1736bb270dd4a37c5b38e5f0ec0ebf62906266f4bdbd1d12ebfb31a08c1674d1137f07987a1db6d3886263ca7c9086a9c7b21c53cbd37499b60a6ec1b4e7d4d204f33a956dd7f9b654140147267d5a908b5c50ac40ce8b50146553e762c311ec158e3c7bc96c6f8f9e45deaa59278d57f9ae216bb31b0d5538ae4035aae57450cbaf185cc640f2425f58673b92b386d7976f6ace25424dc14f8176a4c437f7536ae6c3e8c7d60a1e2cb6c8a82b84248af48a82420d75841cf05e62d74aa12f57cda7d2e3ee82653a707d00db68b58e0629fa67c59e6f179627495ced99865e4dae54823cd565a6298e02ac88f90108a60f77bcfd78aa4a60f449924b1e2467a0bec3b8ea1485ca197ac200735c3b6677927b58832f92168c962a61d217a29cd30bc40c359f59853981dcdc63327473c8ee0b7d9db81ea78438440889e18bda50a2b5a0f0adee4891ca593f80b56c42d001f5be97c5d030dd40063d213f507dc7e952b5ce51ee8fd8287b2c396094c52b54372dc281834cea4f0a7028a30b2cfc46583b772cebb6613621708371154b39c52bc49648d0f2a253fb78309c97e74cad62607d358aab0c5ae904b3b094a63312f8e1a174911942d1ca2970c51d06f01e0f0b48e683ea2730bb6c044f07f82c171a052bef7f164fc29d51fed000f1236da8b3b5b47c6bc66afa4b534c2b5a4845487c02d435f8ee8497b73d649d53b48aceb2cfde40eebf9944aed3ceb6f073b98f4bdec58d8ba1c4e40353df33a4610677449328d7fbd6cc7d09567a2c69636d5678b55e3255331198e8bdb00aa0dcf02250df740502efe6112dbe42bc9b624aeeaf4612e6e7c57af4145e4672665a06cd2cbc6c694c9c0635f7293feeb31e2a4047737b7ef16bd35a2bb84fd575e89a6bcfa7d03856c55ca2d4ecb939b4e4be52bbf75aa1756c6b94f3356b45f7403cffc1327e328746b66532aebdf73872a90e1eb13bb0eabf71bec07786c280cbc14f74bb1de420a788b07482984274f0ae3f6ace63f3d922c570f106e9c358b3cb2f66cb7cd1c1759829d8e4a266e88892d866d8f8023dbb57e1af1f8b337ec53f092143d8de4425a55d4fd2b18918584f1d00c035526ddf1e0c2bf984fe1ebe1b9c732a512ac80c2ec5cf6c195d49ce5b7e4cd2f2407e1310295aa2dcc86a07c7ef834e1af46bd345be21d1ceb8b0a054bd2fc989be65f739785c4bd2ba5d4a2603d8b3dbecf052877b776089bcea08c56f504c4e82f5e2b678081edbccc1ced22685e6ccf0a88338afbd5e3cc3ae53e407f987b687cc9f19553cb668938a57aa5f5359e5a3434fc5ab25b891be260945eb878702af0fd75cf396720f3bbf11d56ecc609fbb99133aadf8311c5bfde4f2ef01f63e6ade6fb1f8d9279db54ebb58e9b697aa1a651f5445f4722c250d1ddf9fc5afac7f842561106a757c99b395fb0355ac63a31e98a45ca55fb4216691be10baa5d4f21125efcece04ffc88936575a55f7442f899e9a8a006af17d1a25d810c852a9776a8aa970b49f7d1a80a7670f34015f6e06d91d6b7c96de3700af4043e2578413e2e07afceb866f127d4b7f077cfe1a687e0f4be84c2af2d32e16d961d29e41579eb5469adf46942e1df08019f279244a59c25fcfce823b35302f155aebe4191233ba2c116d7d68dda0ae8644e77d8cb967a2b047137f6303f5d54649956630cd68be43d9f96c2b08082cc672a7f3f04f3b160d542cc660b249d9622cd247df81276c7d5656380682348840c286e22e85202b1296d5925142aa0d1e14d101492f86d0b4577b6fb823753a1d90c243e233b63a8a93cf186cb50c5c9409b4915d5e62804764c42c2234fd27d122dbc889f5a9a9e66441665764c93775c218c9eb2d525f1f9b90fa2e5a20e5554edc35347aed02b4725567066593138fdde83c038d196ecabc7af7da5cfc4fb86187cb35d839983dbadfad0f877acc687fd7b25078479c1b67d1c129019139b35c9c33b90963bd8b0606e8a3ddfc797eccfce4b9925d79fbaa72ab5aa53d080e9898f6e884f579684df32c36298df55ba60e613bf2b0a12b0c82f639c05e2bd91f0d7153312ff039cb4a83291500dd9c16bef686f621f18e1562f88322711c0ff8039f387804600c3aa4830bb4e628904a4a3d69fb2449804f4d4e25eb9a445c616eb6a49c6f5c7bda001d1dee2ccb15a527c4f2f20b133e2105ce542bc6e1bb607a444cf6719d2e3f95d0781029e016d3190a2358656b92bf9bdf1ba62022112c69c2e4504cb695140dcd2f2b7800852afe88a4b8904e131ee7d200c9fb9e26d57a5bdf2215bdbb601c2f2930eeba5063075cbd570e29570bcfdf6598cdc216ce672be1da16d2161bd2d34e4337695a7bbf45ab23940d2e4fa583f324855388a2ce4c42c07b7ad5684140e26b447d4bf0e02d0adb65707653c4624eb364fd0cc89428d9ba020c89773785c957d7378dabbd5ed8e1f6669b0911deb1371580e78e9fd330d0b881c15c97ae2dc3418676fbdc2cb16c32208179b81d60ac536c6d77c7d6f6d1add49093ceb0422bb0e09df1d79f741d4ab33675462b15260af33dbda918143e0818675ae766809e05390e8da859d57452eee38477ac62bca86aa29dc5479f537377f27851ed21c5a34e36e23da2e26b21010e1073c5e094558591476ed0bc6af32ae1e23744871d168fa7db66d7ba31a26d228f9c3e641668bfdd3c3b915266f0e48da86227342ec033943f8852594439267db715f13d6f289cb826a0f3b08826487f83a6abe99638053160ded1d96c2f363750601b9ddeab0ceec3bc26054463a32b4600d3e9b98fdd7ce48af49111461d746b4850876a918a8429ef76683c9f716c91f1b5acada0845de47349759e4aa42c3407f2436acb502f0fe2c4a1a6e59a6e7495ee36fea1af026be8f3c9b772d8e12399f870904799ffab632ad0a41d847e70f86f3025f3a719fca4200e462f963dda537a9901ba1521022ce0d1d9e46f198817735148e538b4fcdb3f42b3acf3c73fc677d8bc1a0faf95a8e23f51c7acdb0e3d91a41d6f7b3ab91c61c2c78e314bf7b09b705dfed1f0122fb3ce2bced0acc860144e8e067f92f6366ee9c7c293a429878ddd6450d15ffdf26ca295fade4a7b74352ca56fbdc7a6bf55bc50d649676765a775d5345edaabccbdf3ff29eaa6438f894c8c88fb6fe620797d036dbaaefb25666ca78b969bd4007cceb7f36c39473e8693ced3ec06336f8a99fc49cdb10215f4da31f139371c20c619e109201c6d74ea5d97d807411f3cfd9007275bfe32d6d4a1abebae77a694b2addbc40c4018a9635057c7d535acfa4c0cc70aa89d804fb9a645b6eb25a9cfe4f0c6c7e0f2d588713dda9821010d2eee5d040a65d8c1a5782fa4b542b07cc3d200f0983d9785f0089389aca7f187352d0f8a04fe12213952c7bf009d38d3d1309fdadff58c336e31397586fd6f986bf538210aa2552474c2c0f6f8b91d584dd5c26d4fb51bf616a94380a287c39da0d4d7d3a6f8fece4154d9822b00f536776bc0af8bb83baebbfcb48c64dc3a418376ef965c5c6a3271e3afb53c6627ab7772e06df7fb63112259953cdb2fd6143659b107ee61134f487be5cc5b8c12b7371012c044b94167bdff8b1237229a15edfa22392730807c7912c8f894b6db0d353231f3ba42a1ff16c08e21795883029b35d3f3f93867887930cdf1e25bff15235278ac48773a9f35fc5756da04cf98f345734b7af414fac7dbdc092ab730e3c1d09532ae78ea7ebfdc66c153c7be99709d8983c97961218e70a8eb139c5364b205c11d1e736f1a807978cb562a89ecf3ef76bf610dcfefadf732e38aa80f8c893ddf1c90143a6ca7c61ba62fbda5e89780996f6106f4d27def655d80521d6c7fe0369f7072072c5ff56238fd65ca11984a334ee0d7bfec3a2c4ab36e54fe5a054192ae670914ca46c071b634cf5c6e0a614aa3019c14ea9effcde61e3b1dc870e8ffbbd628ec87846511557a2322c20ce360e919bc10b71f23d4bf7111de56c3d1e95c23cd840005c59f41f404acfb86a245afae594dc765837819c8053c937f69edc750227fa60f1cff91dde89f6eafbd5eb269f9795084002e48800120f05f0d268c7b875199e51563b4107bc67de151d7bc9e9cbbc1436178527fcb6e435c2e694d8009820a84eec870b059494da0cecccbc5ac03bec436cf3fa68bd459c1f4a64ea063d35850ebc1cb148ba53e7ad641e98278e5dfe4c77ad0f8e03a69baa87121acf89ce4eb1179020581d952898f6a3b8d9293307f27b472d636399b42282503347d0b1e1d6391c1a0cdfd5a5f3d72ad50cc2d899d17b76a6f4227aa43ccde8a681d922b83e270607dd1d8cead48bc96b4d4e73dec5df74c567f59aa3ddd82fca1455adca3d3b0499bab6351ddb37845a88e0005e3b58adbb82ba0247e67103d9b017a70210ab053399e2962fd3071cc386371b811f4d95b1df09fc67eb28d937bbb6137501f12657b2a170efa81465dccfc03dabcae0e086aeb790ba02345820f308bc291d182f1aaf2ce097930125285f7920b4b52d0aadcaf7e6c90296b1533003b39bb2b8d99447614c79f35402132c55e9b243cf4fc82557f770f0008e0526ce7a5ac4b98de98a789ab07443c4aab0e2a2b6593fc9cae58f69b584a9c88befcbd23a9f7e30aad60133d7ac8e79611045cb91550572c79b05a76982e4a12c18b28d55fb8cde728053acf2aed3c3f915cf0001ae94000b28b3e58aed3e82d18bbf147235e96e4a22090e1f4611c63c4513194f8ee871e9e8a0568a37051ef5ebd5856c6656bbfab1499ba95b91a21d9bffc096feef0ce8e57669a5bfcfc47f524fb062d335a538e40b2aca9efab975f9c62705b24de93875980eae0e3ed6a1b410c19a05bfff20d17e70fade5c2f3eb4d07f14609eb5af6e7964d7366f77284f59da1184ae4a", 0x1000, 0x101, 0x0, 0x0, r2}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x5, 0xa000, r1, &(0x7f0000001200)="b816a6927899671b9d522210797f9f45cad94e72b7bb82eeec55cea07cc8ba76b0dacda89c6c7527ee567a", 0x2b, 0xffffffffffffffff}]) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r3, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2249.265102][T25562] usb usb9: usbfs: process 25562 (syz-executor.0) did not claim interface 0 before use 13:29:03 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xf, 0x0, 0x0}) 13:29:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xffffffa7}, 0x0) [ 2249.291899][T25564] MPTCP: kernel_bind error, err=-98 13:29:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0702170000000000220001"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000b000100666c4f776572000004000200"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200385f21f94cd54e75d926db6131d919bd7751e9e0d60bc4764305b68760beb2044682ae41fa305e8619ab6fa9d57184798e7a6cf055b4ad82ff8cd82bb9bc8e87f45a1034a75913e2514dc8deda5a79d1177dd14ab51ff7be2fd3bd75dadba935e73715534107697114c2d303ce3bb6a055ec4e2e44d641ae64ba60f9fb011fac7731983aad4a058d7381de7377d58703e65e042c80034792e9bd23f4c0bb792a704e7e07ef0576bb559bf9af871e87bc60c8e1da8f932691b0a9fd58996a140d61d686d9ebb415d68a49cbab7b2c8942d896e32f2d166e1aea25709c2ca9f610"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="70010000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf25130000005c00018008000300b61b117208000300030000001400020076657468305f766972745f77696669000800030002000000140002006261746164765f736c6176655f310000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000044000180140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="40000180140002007866726d3000000000000000000000000800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000000000064000180080001003e7db17b05e8fc8e02218a6c9b139a37ae9979bf2590a5a404ab82750bb92477884b1846c81123da800d439eb2cf4874518c4b255ca159460ab8bfb02b9108cca850ee13aee07cd52ae91daaee2d07dcf4aa8103e5", @ANYRES32=r7, @ANYBLOB="08000300010000000800030001000000140002006d616373656330000000000000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000300010000000800030002000000140002007663616e30000000000000000000000018000180140002006272696467655f736c6176655f310000"], 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x881) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) [ 2249.292647][T25565] MPTCP: kernel_bind error, err=-98 [ 2249.377623][T25569] device batadv0 entered promiscuous mode [ 2249.416525][T25569] device batadv0 left promiscuous mode 13:29:03 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2249.556125][T25574] device batadv0 entered promiscuous mode [ 2249.587983][T25574] device batadv0 left promiscuous mode 13:29:03 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x10, 0x0, 0x0}) [ 2249.605366][T25575] usb usb9: usbfs: process 25575 (syz-executor.0) did not claim interface 0 before use [ 2249.620974][T25576] usb usb9: usbfs: process 25576 (syz-executor.4) did not claim interface 0 before use [ 2249.666393][T25580] MPTCP: kernel_bind error, err=-98 13:29:03 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xffffffef}, 0x0) [ 2249.669307][T25581] MPTCP: kernel_bind error, err=-98 [ 2249.692895][T25583] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 13:29:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000050000000020000000400000052", 0x49, 0x1c00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x14000}, {0x0}], 0x0, &(0x7f0000013800)=ANY=[]) r3 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000001440)={{{0x6, 0x1}}, 0x3c, 0x0, &(0x7f0000000080)="b80381966d3a642cf1cc8cb525b32566336f899627063017d5f69bf3a431956ade674c2846daaf2926f8eb4ac1896374c321f4e6b4eaa9c16d18e977"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001f80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000440)={{r3}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r5}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0x0, 0x0, 0x1, 0x500, @usage=0x2, 0x0, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, r5, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x0, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000100)={r5, 0x100000001, 0x0, [0xc2, 0x9, 0x6, 0x6, 0x1], [0x2, 0x200, 0x3ff, 0x204, 0x9, 0xfffffffffffffff8, 0x5, 0x80, 0x100, 0xf66, 0xfffffffffffff7f2, 0x5, 0x9, 0x4, 0x40, 0x2, 0x7, 0x6, 0xaa45, 0x1f, 0x7ff, 0x957, 0x40, 0x1000, 0x7, 0xfffffffffffffff9, 0x3, 0x8, 0xfffffffffffffe01, 0x6, 0x4, 0x2, 0x7fffffff, 0x4, 0x4, 0x7ff, 0x20c5, 0x4, 0x80000000, 0x8, 0xffffffffffff174b, 0x78, 0xc00000, 0x7f, 0xfa4f, 0x3, 0x3, 0x7, 0x10001, 0xe3, 0x1, 0x1, 0x0, 0x8001, 0x40000000, 0x9, 0xfffffffffffffffd, 0x100000001, 0x4, 0x6, 0x7ff, 0x3, 0xfffffffffffff001, 0x5, 0x7, 0x56, 0x9, 0x1, 0x200, 0x3c27, 0x40, 0x2, 0x8, 0x2f8, 0x7, 0x92, 0xffffffff00000000, 0x1, 0x6, 0x784, 0x19, 0x1000, 0x2d, 0x4, 0x3, 0x100000000, 0xb459, 0x101, 0x6, 0x20, 0x0, 0x20044f21, 0x100, 0x7b3, 0x3, 0x1f, 0x1, 0xacd, 0x0, 0xfffffffffffffffc, 0x7ff, 0x0, 0xffff, 0x2, 0x7fff, 0xffff, 0x5, 0x401, 0x1f, 0xd1, 0x7ff, 0x2, 0x98, 0x10001, 0xffff, 0xffff, 0x9, 0x9, 0x100000001, 0x400, 0x7]}) [ 2249.739451][T25585] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 13:29:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x408003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) [ 2249.798210][T25587] device batadv0 entered promiscuous mode [ 2249.823750][T25587] device batadv0 left promiscuous mode [ 2249.893232][T25594] usb usb9: usbfs: process 25594 (syz-executor.0) did not claim interface 0 before use [ 2249.911744][T25595] usb usb9: usbfs: process 25595 (syz-executor.4) did not claim interface 0 before use [ 2249.938227][T25595] loop4: detected capacity change from 0 to 1024 13:29:04 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfffe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x11, 0x0, 0x0}) [ 2249.998039][T25597] device batadv0 entered promiscuous mode [ 2250.025813][T25597] device batadv0 left promiscuous mode [ 2250.037397][T25600] MPTCP: kernel_bind error, err=-98 [ 2250.038088][T25602] MPTCP: kernel_bind error, err=-98 [ 2250.044784][ C1] sd 0:0:1:0: tag#7841 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2250.059818][ C1] sd 0:0:1:0: tag#7841 CDB: opcode=0xe5 (vendor) [ 2250.066234][ C1] sd 0:0:1:0: tag#7841 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2250.075310][ C1] sd 0:0:1:0: tag#7841 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2250.084338][ C1] sd 0:0:1:0: tag#7841 CDB[20]: ba 13:29:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xfffffff0}, 0x0) 13:29:04 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xfffe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2250.093381][T25595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2250.108701][T25595] usb usb9: usbfs: process 25595 (syz-executor.4) did not claim interface 0 before use 13:29:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x0, 0x9, 0x1ff, 0xb2, 0x259, &(0x7f0000000100)="73405157f6063e0e844530c96edcec86dbb729414e2cd0ed70d9e970e63771b7824a81b78f3c3c17b7e4fb233102f60b8d99a58301573eba32fb0f400fa9a92afbd2cc9f87b1ce127b4bc16fd379126d9d845d78abdf718ceeb7471089a50966575291088340e45e7a2fe0706a936b4252d9bb94c1c8ce62978bc90943945076181e108b859523c5f6830f8f0e7d2213ab688a58e5e643564ebf7b562d02350edb5a6767a84392e398109c90d0d0a1e709db"}) r1 = signalfd(r0, &(0x7f0000000000), 0x8) r2 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x5, 0x5, &(0x7f0000000580)=[{&(0x7f0000000240)="a878f689a90369eec19f90d02c517aaecd5abac17377e708fddbd583d5607a9eb149434f9350140f10dc09b1abfa682a371144ccee5ffc04d13145733d88b9f21228894a11ed7a16afd58828c985f39846cfe9d9a934b0fdf662949715d8a48ed2b0afa476a6f6a1ee45b19c87ef25226c71f0a87d7db1f6347a664d16cd955ffe4e425e3a7d3cb4b1bc944a3d35699a6bc820c789bbc7519f9bb445e8ab85d0770ec5e0de6a46", 0xa7, 0xffffffffe1b336b3}, {&(0x7f0000000300)="31566e06f19b92a29cc51fcc62ae241d10d07bd60941be35d1ea89343f7ebf103cf3e840bd9002c23891342615c32a212fca69bc02bb34d08bb769c9978e10ab0edbd511494a23053d59f099c82a31006e2ef3b4ab09d175d81ae726145bcddf29f8339a91f5f2b766c6c745", 0x6c, 0x3}, {&(0x7f0000000380)="9f2de3ac05fb7bc1ab3c2814be06708837c9fab99d77ca9471f147601567e576b2515a42a472fd47107b0bb753fb5765d737b0aaa67a0a771727f91693c341e61024ac050d364f533eff67c961a0e9fb6adf3be03aa7164b915ef42c432935dd30243686d25d5354db19a52e18b03a2703186cdbfde2770e23d973543807fefb724a9c2053448124c33cb47232f6e2d576d49ec0cb87ae305924d67d4b7bdb009801c36832294e943147ae7094f08ae2e9738e9f36e0b05c1623f6c6cf99e1fc", 0xc0, 0x1}, {&(0x7f0000000440)="7592a044a49b8bc236ab0edb77c9925486cb6022571aefa32c4b29675aaf8bd27cb5904b39c10eec51065f14932a5abf5e3d75d3d6240c2b2e4275eb5c595fa959abde2f7bf29469c9a8a809dd133036dc071b3241405c32fbd37fc2d08420f624db2ab5fe8b878523451f9a4190ffe3ebefb9f40141fdff", 0x78, 0x17}, {&(0x7f00000004c0)="25e482b3d7063a28ef0e008189e396caf2ef48ab19f5f0fd0a7abb4592e6a17e76c96f38f8318832e101557bf90fe50d46ee422e79299eb43eb2eef404c6686ba769a95c2ee23caef869ac30b8691c26b296ed6416a99dd97765194f5d5377d452c595c726c8f98cf6cd7c29b548f7e3f32f96f0cece6dc7969b3022ea741619f681eb178d", 0x85, 0x3fd}], 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB="2f646576b26275732f7573622f3030232f303023002c826d61630ddd106b66737472610a000000000000002c736d61636b66736465663d2c736d61636b66737425616e736d7574653d2a2c666f776e", @ANYRESDEC=0x0, @ANYBLOB=',dont_appraise,fsmagic=0x0000000000000003,uid=', @ANYRESDEC=r1, @ANYRES16=r0]) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000008c0)={0x0, 0x15, 0x90d3, 0x6, 0x18d, 0x2, &(0x7f0000000900)="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"}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/cgroup\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000780)={0x50, 0x80}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000700)) 13:29:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x105600, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x74}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8042) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x12, 0x0, 0x0}) [ 2250.241148][T25612] device batadv0 entered promiscuous mode [ 2250.256377][T25614] usb usb9: usbfs: process 25614 (syz-executor.0) did not claim interface 0 before use [ 2250.268423][T25612] device batadv0 left promiscuous mode [ 2250.350602][T25616] MPTCP: kernel_bind error, err=-98 13:29:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xfffffffe}, 0x0) [ 2250.351007][T25617] MPTCP: kernel_bind error, err=-98 [ 2250.410713][T25618] device batadv0 entered promiscuous mode [ 2250.432409][T25624] vhci_hcd: invalid port number 255 [ 2250.437667][T25624] vhci_hcd: default hub control req: 2000 v0009 i00ff l178 [ 2250.447514][T25624] loop4: detected capacity change from 0 to 144182 [ 2250.454128][T25618] device batadv0 left promiscuous mode 13:29:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xaa01}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008098}, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0a0080", @ANYRES16=r1, @ANYBLOB="010000000000000001000000240001800800060005000000061005004e200000060001000200000008000300000000000000"], 0x38}}, 0x0) [ 2250.462088][T25625] usb usb9: usbfs: process 25625 (syz-executor.0) did not claim interface 0 before use [ 2250.487038][T25624] usb usb9: usbfs: process 25624 (syz-executor.4) did not claim interface 0 before use [ 2250.506103][T25624] vhci_hcd: invalid port number 255 13:29:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x25, 0x0, 0x0}) [ 2250.511168][T25628] loop4: detected capacity change from 0 to 144182 [ 2250.511370][T25624] vhci_hcd: default hub control req: 2000 v0009 i00ff l178 [ 2250.532435][T25624] usb usb9: usbfs: process 25624 (syz-executor.4) did not claim interface 0 before use [ 2250.536519][T25612] device batadv0 entered promiscuous mode [ 2250.552347][T25612] device batadv0 left promiscuous mode 13:29:04 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ffff, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:04 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x34000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000050000000020000000400000052", 0x49, 0x1c00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x14000}, {0x0}], 0x0, &(0x7f0000013800)=ANY=[]) r2 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001f80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{r2}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r4}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r4}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0x0, 0x0, 0x1, 0x500, @usage=0x2, 0x0, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, r4, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x0, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000100)={r4, 0x800, 0x586}) [ 2250.673761][T25636] MPTCP: kernel_bind error, err=-98 [ 2250.675184][T25637] MPTCP: kernel_bind error, err=-98 13:29:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x3000000000000}, 0x0) 13:29:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x2a0003) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r6, 0x3c2e60e28f3e69ab, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @xdp={0x2c, 0x2, 0x0, 0x3d}, @generic={0xf, "495cb1033f8d863f83df77b47e6a"}, @llc={0x1a, 0x6, 0x1, 0x7e, 0x1f, 0x20, @remote}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='macvlan0\x00', 0x0, 0x7ff, 0x8001}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000444}, 0x20008000) 13:29:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x48, 0x0, 0x0}) [ 2250.712542][T25639] usb usb9: usbfs: process 25639 (syz-executor.0) did not claim interface 0 before use [ 2250.825125][T25643] device batadv0 entered promiscuous mode [ 2250.850106][T25643] device batadv0 left promiscuous mode [ 2250.865384][T25644] usb usb9: usbfs: process 25644 (syz-executor.4) did not claim interface 0 before use [ 2250.877861][T25644] loop4: detected capacity change from 0 to 1024 [ 2250.932063][T25646] device batadv0 entered promiscuous mode [ 2250.959151][T25646] device batadv0 left promiscuous mode [ 2250.967917][T25644] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2250.998181][ C1] sd 0:0:1:0: tag#7821 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2251.008063][ C1] sd 0:0:1:0: tag#7821 CDB: opcode=0xe5 (vendor) [ 2251.014394][ C1] sd 0:0:1:0: tag#7821 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2251.023481][ C1] sd 0:0:1:0: tag#7821 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2251.032518][ C1] sd 0:0:1:0: tag#7821 CDB[20]: ba [ 2251.038731][T25644] usb usb9: usbfs: process 25644 (syz-executor.4) did not claim interface 0 before use 13:29:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0x5b3c, 0xe, [{0x3, 0x1}, {0x4}, {0x4}, {0x7}, {0x9, 0x1}, {0x2}, {0x8, 0x1}, {0x4}, {0xb}, {0x0, 0x1}, {0x5, 0x1}, {0xa, 0x1}, {0x8, 0x1}, {0x1}]}) 13:29:05 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3ffff, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:05 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2251.076241][ C1] sd 0:0:1:0: tag#7823 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2251.086119][ C1] sd 0:0:1:0: tag#7823 CDB: opcode=0xe5 (vendor) [ 2251.092497][ C1] sd 0:0:1:0: tag#7823 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2251.101555][ C1] sd 0:0:1:0: tag#7823 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2251.110618][ C1] sd 0:0:1:0: tag#7823 CDB[20]: ba 13:29:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x40}}, 0x0) 13:29:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x40030000000000}, 0x0) [ 2251.198738][T25659] MPTCP: kernel_bind error, err=-98 13:29:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4c, 0x0, 0x0}) [ 2251.199283][T25660] MPTCP: kernel_bind error, err=-98 [ 2251.241173][T25661] usb usb9: usbfs: process 25661 (syz-executor.0) did not claim interface 0 before use [ 2251.342071][T25667] MPTCP: kernel_bind error, err=-98 [ 2251.372291][T25665] device batadv0 entered promiscuous mode [ 2251.392567][T25668] MPTCP: kernel_bind error, err=-98 [ 2251.407964][T25665] device batadv0 left promiscuous mode 13:29:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x100000000000000}, 0x0) [ 2251.421982][T25671] usb usb9: usbfs: process 25671 (syz-executor.4) did not claim interface 0 before use [ 2251.438365][T25671] usb usb9: usbfs: process 25671 (syz-executor.4) did not claim interface 0 before use 13:29:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd28, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "5ca83874fbebbb0e141822f312da1c0c"}, 0x11, 0x3) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r4, r3, 0x0, 0x100000001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xd}, 0x7f, 0x40, &(0x7f0000000300)="61c1cc3c362996295ba5143b3e4ed50ce46ab028a68397c1faad138992e78a2d48500fcbe4d17ad5f396bdf55cad0d691ec962cb2edd2a07e3fefe2a881be3871bac7d31c33d8b6b76ac38288a13c6e7311847c4a5d04a8b961cf656b152436ce2703ae59f088d9e1718203c49845ffbab0dc8094bb52e878f5095d73cb1c46c004adb95c0c900fd43d0a480e5072a24465064b629ac65358da8b21f62cf18", 0x9f, 0x7f, 0x40, 0x8, 0x7476, 0x7f, &(0x7f00000003c0)="046f69403961539b441ca1d8e4cd90773ef00ffaee42e103da631275c6ac1c38e80894bfb1dbfa718a5bbbba8ac201cd17d2778a83b0b8a99f7339efbcd49a4bc792b9c678989f46888d3dcf524cf26f4c3f50d3e2bb0d40cda3c2c33a060be0", [{0xafc, 0x3, 0x90}, {0x9, 0x40, 0x2}, {0x800, 0x5, 0x7}, {0x0, 0xa8, 0x8001}, {0x4, 0x8, 0x7ff}, {0x7, 0xffffffff, 0x5}, {0x81, 0x81, 0x5629e52b}, {0x6, 0x7fff, 0x38000}]}) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r5, r2, 0x0, 0x100000001) pwritev(r5, &(0x7f00000004c0), 0x0, 0x104, 0x200) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @multicast}) openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r7) [ 2251.501181][T25669] device batadv0 entered promiscuous mode [ 2251.535665][T25669] device batadv0 left promiscuous mode 13:29:05 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x80000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x60, 0x0, 0x0}) 13:29:05 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2251.588043][T25678] usb usb9: usbfs: process 25678 (syz-executor.0) did not claim interface 0 before use [ 2251.675842][T25683] MPTCP: kernel_bind error, err=-98 13:29:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x200000000000000}, 0x0) [ 2251.676283][T25684] MPTCP: kernel_bind error, err=-98 [ 2251.714417][T25690] usb usb9: usbfs: process 25690 (syz-executor.4) did not claim interface 0 before use 13:29:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x606, 0x4000400, {{0x30, 0x4, 0x3, 0xc, 0xc0, 0x68, 0x0, 0xff, 0x4, 0x0, @local, @private=0xa010100, {[@end, @timestamp_prespec={0x44, 0x24, 0x60, 0x3, 0x0, [{@multicast1, 0x6}, {@empty, 0xd59b}, {@broadcast, 0x1e10}, {@private=0xa010102, 0xff}]}, @end, @lsrr={0x83, 0x2b, 0x78, [@remote, @rand_addr=0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100, @private=0xa010100, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xae, [@dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x2a}, @remote]}, @timestamp_addr={0x44, 0x44, 0xb2, 0x1, 0x0, [{@rand_addr=0x64010100, 0x2}, {@multicast1, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x41}}, {@local, 0x9}, {@empty, 0x7fffffff}, {@loopback, 0x2808}, {@rand_addr=0x64010101, 0xd52}, {@private=0xa010100, 0x1}]}, @noop, @generic={0x88, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48014}, 0x40000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80003) [ 2251.759068][T25690] usb usb9: usbfs: process 25690 (syz-executor.4) did not claim interface 0 before use 13:29:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x68, 0x0, 0x0}) [ 2251.809505][T25693] device batadv0 entered promiscuous mode [ 2251.833412][T25693] device batadv0 left promiscuous mode [ 2251.849825][T25696] usb usb9: usbfs: process 25696 (syz-executor.0) did not claim interface 0 before use 13:29:05 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2251.931233][T25697] device batadv0 entered promiscuous mode [ 2251.954295][T25697] device batadv0 left promiscuous mode 13:29:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xb, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18f6ff000000000202a8c5571b965c795b601c74486d783ac6fb2976b24be06a74756872cc4a784980000000000000000283af6a260e8390304c050ace180000000000002100000000"], &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x78) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="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", 0xfc) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000740)={0x0, 'team0\x00', {0x1}, 0xff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4}, 0x3c) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/108}, 0x20) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r3, 0x0, r4, 0x0, 0x140006, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x4}, 0x10) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000700)={{r2}, 0x3, 0x5, 0x100000000}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000840)="8edb68cdbe5b69986bca8f3ff604dd3c7f765957716ff4a8d42533fd63c40541a0a94f49db0661b5d45bae0a2978342f8917269fef09342e821d28dc416faf0fed35bf8aa602d8c7b337172b18da298231ee7968dbf638dcbd189e4bfb95dc11356c6eee47710b248fc9e78c1bc9bb092f5db5897ef641166cbeaec7e030eb5725476177ac70a0e3ebf2dc19ec15eadcf9175aa334cabe2059b0cd6d19f892a38ef2245eb4381d80d9482a985ae6f2ebe2d968c0d3626494a91c3c125127f6b50bd742572e3c3b7a6b4745d4", 0xcc}, {&(0x7f0000000a80)="34252f3133ec2d4197a9572ce494147dbf156a97beda7da6959c6333cf6d51ed3dbbc2ad37da0bd7c28ebf612d4167b60ea908b91d332db46ff8067d282a991b85ed3090083c9f4620ade97cd250f16ed850c64e356e0409ad02f2c23cd9ce71377876013070d01335c57a861f219c39e94394be2a68172b7d1f08751f09e81e1abe30d522fef68534cb29aa7151b6507fbb27a7d111e7a1ad2dbf715ef2fc85c37a52733d1bc7b3e49599d1a99873f7d688f8208f430f9b2bd71ec9ff29a5f41cbdac234a040e74eadaf30238b9ed954b956c911b6a64d5e9c70b2915164fdc", 0xe0}, {&(0x7f0000000940)="15ea2e3b0def5d64fb8d6c79b16cc8de25171b4cb8366fba11d889b74626429984922932ec142e7ba63850aff3f35ba7e15543e672fc10ee6c61e24c3e20906c626f59706d5f9a9b418d0a3fe806cb71ec814391c0b754a1ba7e2dfc52cb3dcaf8f1f9", 0x63}, {&(0x7f00000009c0)="ed083d1b830a5264ab109c05154afd8a81fe2f6c77eacb8f819c3da6050016938b06a83227dfa19bb0f1bb0ea3ebd155cf5f74162aff3ee25fd7a890e0ac25c0be1def2267d3803f17de30de5817f6c4116edf39e0c68470f0f709735f", 0x5d}], 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000440)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xa, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000009b0000000000000000800000003040000000000085100000ffffffff183b0000010000000000000000000000d370fcff0400000018240000", @ANYRES32=r3, @ANYBLOB="0000ffff00001963104946155af17d220773353e1a4efc66d924c56719ed8fbe6ebfd30280fc0b5f9116ae5fcbf88de5d8ae2ed52eed8b20e345bfc6d7f3fc34adbecf01a9b4d62055342b48a3c2dc831d1fe8d079cf7151a42e7230e15e2c4799128538c356ae7633ab34380ab258aefbac0e9d75760d3743c7afc7cecb4edaf990f1209043579359b48896407b91aec97b4a7f0e370510786a218a09730741d9a95f7c994dae613fc6f2630228e3144449f3a033489a6845c1938be21046d03532c6913ea57a8e514a"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xe2, &(0x7f0000000340)=""/226, 0x41000, 0x1, '\x00', r7, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x35}, 0x10, 0xffffffffffffffff}, 0x78) [ 2252.016748][T25703] MPTCP: kernel_bind error, err=-98 [ 2252.017251][T25704] MPTCP: kernel_bind error, err=-98 [ 2252.027540][T25707] usb usb9: usbfs: process 25707 (syz-executor.4) did not claim interface 0 before use [ 2252.046581][T25709] usb usb9: usbfs: process 25709 (syz-executor.0) did not claim interface 0 before use 13:29:06 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x80000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x300000000000000}, 0x0) 13:29:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6c, 0x0, 0x0}) 13:29:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0x8, 0x0, &(0x7f0000000100)="a72bf02940cf62e5d54c8728c59f6e288b524617bcb5bad4a75e387151b4f481fad8a0c2b3afc419e343962af8cd9f26cc0b5088a866f97c2735509f15d0026cc0ef146c35c0e8815b06f9a38a9f9ffc4086c29b1ff4cb814f73a305a799b8caee4658645be381518442f800cd23efb42c01fa0bb1d6773612013c4ad03a5233577638a2d6c8cc2227cbe0b747cadd8eb505205fe76a00b878b72dd0114c63bae90a17a8055dd5f4acdfab98c722e5bf7176fc6754bacb4eaf4cd363d640fd34760fd1c53b3c63561a704ae25408e1be", 0xd0, 0x2, 0x1f, 0x0, 0x1, 0x9, &(0x7f0000000200)="0c6371c935121cba1a6eaf004314b83edcaa7eb1f033d79e3e89d35da4573651c15cdf4c94f2a1a245acf82691bfe0e16312083c8ab510ab2ad6bf4cc6c7a1c64dd75a3d331f0b40be6a917406ede650e49a39f8580f91fd34"}) [ 2252.119938][T25711] device batadv0 entered promiscuous mode [ 2252.129385][T25707] usb usb9: usbfs: process 25707 (syz-executor.4) did not claim interface 0 before use [ 2252.152989][T25711] device batadv0 left promiscuous mode 13:29:06 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2252.271781][T25719] MPTCP: kernel_bind error, err=-98 [ 2252.272389][T25720] MPTCP: kernel_bind error, err=-98 [ 2252.283276][T25721] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 2252.298882][T25723] usb usb9: usbfs: process 25723 (syz-executor.0) did not claim interface 0 before use 13:29:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x400000000000000}, 0x0) [ 2252.343698][T25722] device batadv0 entered promiscuous mode 13:29:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x74, 0x0, 0x0}) 13:29:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000100)={{0x0, 0x7}, 0x100, './file0\x00'}) [ 2252.387081][T25724] usb usb9: usbfs: process 25724 (syz-executor.4) did not claim interface 0 before use [ 2252.394465][T25722] device batadv0 left promiscuous mode [ 2252.478270][T25727] device batadv0 entered promiscuous mode [ 2252.499541][T25727] device batadv0 left promiscuous mode 13:29:06 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7a, 0x0, 0x0}) 13:29:06 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2252.540669][T25732] usb usb9: usbfs: process 25732 (syz-executor.0) did not claim interface 0 before use [ 2252.599858][T25735] MPTCP: kernel_bind error, err=-98 [ 2252.601181][T25736] MPTCP: kernel_bind error, err=-98 [ 2252.636486][T25738] usb usb9: usbfs: process 25738 (syz-executor.4) did not claim interface 0 before use [ 2252.654020][T25738] usb usb9: usbfs: process 25738 (syz-executor.4) did not claim interface 0 before use [ 2252.756663][T25742] device batadv0 entered promiscuous mode [ 2252.778945][T25742] device batadv0 left promiscuous mode [ 2252.824653][T25744] usb usb9: usbfs: process 25744 (syz-executor.0) did not claim interface 0 before use [ 2252.905250][T25746] device batadv0 entered promiscuous mode [ 2252.947152][T25746] device batadv0 left promiscuous mode 13:29:07 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)={0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x500000000000000}, 0x0) 13:29:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000100)=""/195, 0xc3}) 13:29:07 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x400300, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x300, 0x0, 0x0}) 13:29:07 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2253.117065][T25721] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 2253.176914][T25757] usb usb9: usbfs: process 25757 (syz-executor.4) did not claim interface 0 before use [ 2253.189879][T25758] usb usb9: usbfs: process 25758 (syz-executor.0) did not claim interface 0 before use [ 2253.203496][T25757] usb usb9: usbfs: process 25757 (syz-executor.4) did not claim interface 0 before use [ 2253.208448][T25755] device batadv0 entered promiscuous mode 13:29:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x500, 0x0, 0x0}) [ 2253.223514][T25756] MPTCP: kernel_bind error, err=-98 [ 2253.224578][T25760] MPTCP: kernel_bind error, err=-98 [ 2253.234920][T25755] device batadv0 left promiscuous mode 13:29:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x600000000000000}, 0x0) 13:29:07 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x56}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4800) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x2, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0xa, 0x4, 0x3, 0xfffffffffffffffe, 0x1}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x35, &(0x7f0000000140)=""/53, 0x40f00, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0x8, 0xee}, 0x10, 0xffffffffffffffff}, 0x78) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r5, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2253.322067][T25761] device batadv0 entered promiscuous mode [ 2253.354226][T25761] device batadv0 left promiscuous mode 13:29:07 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0xd11, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x260, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x244, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9f7b4507cfcba8fc1e957f9f28e7b1960c0c9811342d5de0375797e38679f1e5"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xf, @mcast1, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x67ee, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a7337786cd7008f29a679051002a29319700c6744051c09113fbbe7662935646"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}]}, {0x130, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a645e673f805b8d846f7e8727e58e79d880e1aac2ea18905a05f43de7468bf98"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdbd}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 13:29:07 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2253.405171][T25767] usb usb9: usbfs: process 25767 (syz-executor.0) did not claim interface 0 before use 13:29:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x600, 0x0, 0x0}) 13:29:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x1000) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2253.462381][T25771] usb usb9: usbfs: process 25771 (syz-executor.4) did not claim interface 0 before use [ 2253.475910][T25773] usb usb9: usbfs: process 25773 (syz-executor.4) did not claim interface 0 before use 13:29:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x700000000000000}, 0x0) [ 2253.507820][T25775] MPTCP: kernel_bind error, err=-98 [ 2253.508343][T25776] MPTCP: kernel_bind error, err=-98 [ 2253.617661][T25779] device batadv0 entered promiscuous mode [ 2253.641755][T25779] device batadv0 left promiscuous mode 13:29:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0xfffffffc, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x700, 0x0, 0x0}) [ 2253.724878][T25782] device batadv0 entered promiscuous mode [ 2253.735149][T25784] usb usb9: usbfs: process 25784 (syz-executor.0) did not claim interface 0 before use [ 2253.750598][T25782] device batadv0 left promiscuous mode 13:29:07 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000100)={0x0, 0x20}) 13:29:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x800000000000000}, 0x0) 13:29:07 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2253.790476][T25788] usb usb9: usbfs: process 25788 (syz-executor.4) did not claim interface 0 before use [ 2253.805179][T25790] MPTCP: kernel_bind error, err=-98 [ 2253.805872][T25791] MPTCP: kernel_bind error, err=-98 [ 2253.817902][T25792] usb usb9: usbfs: process 25792 (syz-executor.4) did not claim interface 0 before use [ 2253.909909][T25799] usb usb9: usbfs: process 25799 (syz-executor.0) did not claim interface 0 before use 13:29:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x900, 0x0, 0x0}) 13:29:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r4, r3, 0x0, 0x100000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0x0, 0x7, 0x1, 0x500, @usage=0x3, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2]}, {0x1f, @struct, 0x0, 0x9, 0xc48, 0x0, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x0, 0x0, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x0, 0x0, 0x40, @usage=0x8, 0x0, 0x0, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x0, 0x7, 0x8}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, 0x0, 0x200007d0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000002440)={{}, r9, 0x10, @unused=[0x2, 0x3000, 0x4, 0xfffffffffffffc00], @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000600)={{}, r9, 0x18, @inherit={0x70, &(0x7f0000000580)={0x1, 0x5, 0x800, 0xce3, {0x8, 0x2, 0x3, 0xfae4, 0x3}, [0x1, 0x5, 0x8, 0x541, 0x4800]}}, @subvolid=0x20}) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="b20450eedd080021d40000000008aed3", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000300000000000500050000000000"], 0x24}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x2f, 0xffff, 0x7fff, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4098}, 0x40000) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x58e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8801) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc1d}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x54}}, 0x4040000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf25010000002400018008000600050000000600010008000000060001000200000008000300ac141423"], 0x38}}, 0x0) [ 2253.969222][T25800] device batadv0 entered promiscuous mode [ 2253.983811][T25804] usb usb9: usbfs: process 25804 (syz-executor.4) did not claim interface 0 before use [ 2253.996119][T25805] MPTCP: kernel_bind error, err=-98 13:29:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x900000000000000}, 0x0) 13:29:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = socket(0x2, 0x1, 0x9) syncfs(r1) [ 2253.996859][T25806] MPTCP: kernel_bind error, err=-98 [ 2254.016252][T25807] usb usb9: usbfs: process 25807 (syz-executor.4) did not claim interface 0 before use [ 2254.053316][T25800] device batadv0 left promiscuous mode [ 2254.127158][T25808] device batadv0 entered promiscuous mode [ 2254.154272][T25808] device batadv0 left promiscuous mode 13:29:08 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:08 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 13:29:08 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xa00, 0x0, 0x0}) [ 2254.298836][T25819] usb usb9: usbfs: process 25819 (syz-executor.0) did not claim interface 0 before use [ 2254.319497][T25820] MPTCP: kernel_bind error, err=-98 13:29:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xa00000000000000}, 0x0) [ 2254.320158][T25821] MPTCP: kernel_bind error, err=-98 [ 2254.370214][T25826] usb usb9: usbfs: process 25826 (syz-executor.4) did not claim interface 0 before use [ 2254.439459][T25828] device batadv0 entered promiscuous mode [ 2254.461046][T25828] device batadv0 left promiscuous mode [ 2254.461221][T25826] usb usb9: usbfs: process 25826 (syz-executor.4) did not claim interface 0 before use [ 2254.536625][T25834] device batadv0 entered promiscuous mode 13:29:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getgroups(0x1, &(0x7f0000000480)=[0xee01]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x4, r1}, {0x2, 0x5, 0xee01}, {0x2, 0xd21c73ac67289a7a, r2}, {0x2, 0x5, r3}, {0x2, 0x2, r5}, {0x2, 0x4, 0xee01}, {0x2, 0x7, r6}], {0x4, 0x2}, [{0x8, 0x2, r7}, {0x8, 0x5, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x2, r8}, {0x8, 0x2, 0xee01}], {0x10, 0x4}, {0x20, 0x5}}, 0x84, 0x2) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r9, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:29:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x30, 0xa9, 0x93, 0x3, 0x0, 0x695, 0x10000, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8978, 0x4, @perf_bp={&(0x7f0000000080)}, 0x20, 0x2, 0x8, 0x1, 0x1ff, 0x3, 0x8ff9, 0x0, 0xff, 0x0, 0x2}, r2, 0x9, 0xffffffffffffffff, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = accept$packet(r7, &(0x7f0000000400), &(0x7f0000000440)=0x14) getsockname$packet(r8, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0xfffffffffffffebf) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x27020000}, 0x4, r9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r11, 0x801, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r12, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x884) 13:29:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xb00000000000000}, 0x0) [ 2254.672569][T25838] usb usb9: usbfs: process 25838 (syz-executor.0) did not claim interface 0 before use [ 2254.683246][T25834] device batadv0 left promiscuous mode [ 2254.691832][T25839] MPTCP: kernel_bind error, err=-98 [ 2254.692662][T25840] MPTCP: kernel_bind error, err=-98 [ 2254.701011][T25838] usb usb9: usbfs: process 25838 (syz-executor.0) did not claim interface 0 before use 13:29:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xb00, 0x0, 0x0}) 13:29:08 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2254.778258][ T24] audit: type=1400 audit(1636637348.767:814): avc: denied { accept } for pid=25841 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2254.803155][T25845] usb usb9: usbfs: process 25845 (syz-executor.4) did not claim interface 0 before use 13:29:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000077, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x30, 0x7a9, 0x4, 0xcd, 0xbd, &(0x7f0000000100)="15eebb1d5223ae15a11f02f665d7e191790335ae3f83552973580f6d76e3b485c0922b9b9836dd17315224c44797248faf1323322f1cb951e5b17c33caa3f3545444fecdd01a7cd58f3c8c755a482e2521b235e089899b97450fa9e37665fae60d63caddf19e5487eaa4c41349ff71375c8a5a1a04517a9a486d556c917e0b5c4549004dec6221799207a919f9995236e9e26a133e876c2f4d37b90f845204c6e609a9b12a7a69cdad58e2bfa281c3f74cadafbb24c238518eae309271cdbd16e96b4a0731f563353fca00b9da"}) 13:29:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd29, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2254.824896][T25847] device batadv0 entered promiscuous mode [ 2254.834536][T25847] device batadv0 left promiscuous mode 13:29:08 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xc00000000000000}, 0x0) 13:29:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xc00, 0x0, 0x0}) [ 2254.926086][T25855] MPTCP: kernel_bind error, err=-98 [ 2254.927217][T25856] MPTCP: kernel_bind error, err=-98 [ 2254.942790][T25858] usb usb9: usbfs: process 25858 (syz-executor.0) did not claim interface 0 before use [ 2255.027774][T25861] device batadv0 entered promiscuous mode [ 2255.051323][T25861] device batadv0 left promiscuous mode 13:29:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000400)=""/174, 0xae}, {&(0x7f0000000700)=""/165, 0xa5}], 0x5, &(0x7f00000007c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x2040) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x1000, 0x1, 0x1}, 0x33) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x80, r6}, 0x38) ioctl$USBDEVFS_BULK(r2, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x87b}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 13:29:09 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x5000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2255.203706][T25870] device batadv0 entered promiscuous mode [ 2255.229520][T25870] device batadv0 left promiscuous mode 13:29:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xd00000000000000}, 0x0) 13:29:09 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xd00, 0x0, 0x0}) [ 2255.270978][T25872] MPTCP: kernel_bind error, err=-98 [ 2255.271455][T25873] MPTCP: kernel_bind error, err=-98 [ 2255.284071][T25875] usb usb9: usbfs: process 25875 (syz-executor.0) did not claim interface 0 before use 13:29:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x84, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000001}, 0x851) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x800, 0x7676d18c, &(0x7f0000000100)="6bae322ba6875b49f0f52d157308ebc341986c9c69523fddd6842023087274812f66868e89bc8f00943babf26bd7ea8b248e58021b5489ef14d5e4ac5c646def49f648fe65eb9f839943e0b5bc85a3c59a8e10ad977c60b495beafd4e5675612b6ddab4a93682492798b8438822ba7f02d45a3df5941a30d3d4d99e77562fefacdf89b4a47efad9a20c0f4303b709909c96d6cfa0f2a46421465ae1abbba"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2255.417466][T25880] device batadv0 entered promiscuous mode [ 2255.440606][T25880] device batadv0 left promiscuous mode [ 2255.546623][T25889] MPTCP: kernel_bind error, err=-98 13:29:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r5, r4, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r7, r6, 0x0, 0x100000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 13:29:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xe00000000000000}, 0x0) 13:29:09 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2255.547036][T25890] MPTCP: kernel_bind error, err=-98 [ 2255.592122][T25888] device batadv0 entered promiscuous mode [ 2255.615002][T25894] usb usb9: usbfs: process 25894 (syz-executor.0) did not claim interface 0 before use 13:29:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xe00, 0x0, 0x0}) [ 2255.653243][T25888] device batadv0 left promiscuous mode 13:29:09 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:09 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x9eb, 0x40000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x4400, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x1407, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x2000077, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 2255.730709][T25899] usb usb9: usbfs: process 25899 (syz-executor.4) did not claim interface 0 before use [ 2255.756869][T25902] usb usb9: usbfs: process 25902 (syz-executor.4) did not claim interface 0 before use 13:29:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xf00000000000000}, 0x0) [ 2255.830579][T25904] device batadv0 entered promiscuous mode [ 2255.849355][T25905] MPTCP: kernel_bind error, err=-98 [ 2255.849935][T25906] MPTCP: kernel_bind error, err=-98 [ 2255.860865][T25904] device batadv0 left promiscuous mode [ 2255.921984][T25911] usb usb9: usbfs: process 25911 (syz-executor.0) did not claim interface 0 before use 13:29:09 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xf00, 0x0, 0x0}) 13:29:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x40000b4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x6ad, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 13:29:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000100), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00f667d66bea297eb6000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x98}, 0x2003) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r1, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001380)={0x0, 0x16, 0x101, 0x5, 0xac, 0x4031, &(0x7f00000012c0)="a1ce6202e91fb290c53a1e75318fcc99b8e8b930305b352f4da29feba551319faf37c5c6f34b89f3bde855712a926bdefef5403c1842bb45a67a9d6d9fbeee4b7b373d0c5c8b12e99f5bfa47b87ee1a44c1b3906af74f1b7645246fec9c2e80f99fa37391f8f85c6eaad5e681322277ef3b57105d8fbe10c0dc5fc20f8b36c914dc7a0b8cd6355e7ce1f356f30fccefb36046d1d31210bc3c31b4fcec26dda527ff7ef5423ba12118a733ca9"}) [ 2255.984241][T25916] device batadv0 entered promiscuous mode [ 2256.039793][T25916] device batadv0 left promiscuous mode [ 2256.121634][T25924] MPTCP: kernel_bind error, err=-98 13:29:10 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x1000000000000000}, 0x0) 13:29:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa8, 0x0, 0xe203cffce54ba91c, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffa}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x150) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2256.126030][T25925] MPTCP: kernel_bind error, err=-98 [ 2256.194814][T25931] device batadv0 entered promiscuous mode [ 2256.211635][T25933] usb usb9: usbfs: process 25933 (syz-executor.0) did not claim interface 0 before use [ 2256.236021][T25932] usb usb9: usbfs: process 25932 (syz-executor.4) did not claim interface 0 before use 13:29:10 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x1100, 0x0, 0x0}) 13:29:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2256.317664][T25931] device batadv0 left promiscuous mode [ 2256.400752][T25940] device batadv0 entered promiscuous mode [ 2256.446284][T25942] MPTCP: kernel_bind error, err=-98 13:29:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x1100000000000000}, 0x0) [ 2256.446881][T25943] MPTCP: kernel_bind error, err=-98 [ 2256.502493][T25946] usb usb9: usbfs: process 25946 (syz-executor.0) did not claim interface 0 before use 13:29:10 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x1200, 0x0, 0x0}) [ 2256.557027][T25947] usb usb9: usbfs: process 25947 (syz-executor.4) did not claim interface 0 before use [ 2256.572095][T25949] MPTCP: kernel_bind error, err=-98 [ 2256.572495][T25950] MPTCP: kernel_bind error, err=-98 [ 2256.588849][T25940] device batadv0 left promiscuous mode 13:29:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0xc0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x1f, 0xa, 0xecdc, 0x8, 0xd6, 0x0, &(0x7f00000000c0)="7445b792ce5c44cd606f52e5e993210aec6e4f13e0755965ee1ef3f009859bb766c71619e57ae0d42a9475f245811d706e50b67ad4733c19cace64bcdb0442ad55d386451b87d27bb4aa0794d861f80d1fb304e3b7d59b368f7b5570a450a2342a4bb061d9058bc54f4100b2dadbedfcc98499f85ec19408cfa719a0967a0f4cbaaa0aba1fceb37ae352b6a400e8e96bde77143d16c8504ee49854198953e826b3388858a460a0c906455b6030b5b0b41bf46657df063af36a372ebdb141e234461935416a72076bafe4a63b2365217a3b1315095fac"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x1) [ 2256.641991][T25953] usb usb9: usbfs: process 25953 (syz-executor.0) did not claim interface 0 before use 13:29:10 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:10 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x2000, 0x0, 0x0}) 13:29:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_interrupt={0x1, {0x6}, 0x5, 0x2, &(0x7f0000000100)="3d768acef7a6333525b67d1b0786f2d01fe9c2fb961cefd7aa9a279379801683d495269183116e8fde297d36879f55898bc1b6e295c394c9971bbdc8df0e548e6541c94f64cde37144a7abccbc3f2b79e9943cf04656f7d3106fcc8e90712b90edcfc3c4f5e41a73174464771d0ca3ef160927d3d43e40f5787a4700518254c998e6af456020265aabe1081e8985982288b240d82ecb3a8ed3806248de71eb83f4648bf36cfa9f37bd4cc5aa4e4d2d391d169e5400fe87b4ab5019f7c4a70df5b83efe30646c3813888111056ca45d", 0xcf, 0x1, 0x1000, 0x0, 0x6534da11, 0x6, &(0x7f0000000300)="b2c2ca33bd0445be1dffef7061dcad2a94c20a4c486ce3d8b6daa912124202fdc0f624283ce55ce9f405b49af2745b1cdc32806f470c16d845214ba1938e359ff7ea24b229a6e44562e38151734c756ed22dbec95de0351663b0cca1646fbb23d23f45001c0af9049bce2d6734857ab46b5c33742b9c470e85111bf26045aef09cdfc4a7a91e3b642db6b16ba0d839afe59140a9f5"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="da", 0x1}], 0x3, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x462b7000) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x90) 13:29:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x1200000000000000}, 0x0) 13:29:10 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2256.802920][T25960] MPTCP: kernel_bind error, err=-98 [ 2256.803522][T25961] MPTCP: kernel_bind error, err=-98 [ 2256.850900][T25965] usb usb9: usbfs: process 25965 (syz-executor.0) did not claim interface 0 before use 13:29:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x2000000000000000}, 0x0) [ 2256.895078][T25966] device batadv0 entered promiscuous mode [ 2256.902705][T25967] usb usb9: usbfs: process 25967 (syz-executor.4) did not claim interface 0 before use 13:29:10 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x2500, 0x0, 0x0}) 13:29:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x2500000000000000}, 0x0) [ 2256.976031][T25972] MPTCP: kernel_bind error, err=-98 [ 2256.976717][T25973] MPTCP: kernel_bind error, err=-98 [ 2256.978564][T25970] usb usb9: usbfs: process 25970 (syz-executor.4) did not claim interface 0 before use [ 2256.986550][T25966] device batadv0 left promiscuous mode 13:29:11 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1}}, 0x0, 0x0, 0x0}) [ 2257.106925][T25971] device batadv0 entered promiscuous mode [ 2257.117307][T25975] usb usb9: usbfs: process 25975 (syz-executor.0) did not claim interface 0 before use [ 2257.146480][T25971] device batadv0 left promiscuous mode 13:29:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x3f00, 0x0, 0x0}) 13:29:11 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x9000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2257.261884][T25981] MPTCP: kernel_bind error, err=-98 13:29:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4800000000000000}, 0x0) 13:29:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) signalfd4(r2, &(0x7f0000000000)={[0x1]}, 0x8, 0x800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x22900, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001140)={0x60, 0xa, 0xfffa, 0x0, 0x1000, 0x1ff, &(0x7f0000000140)="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"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:29:11 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2257.262505][T25982] MPTCP: kernel_bind error, err=-98 [ 2257.344467][T25987] usb usb9: usbfs: process 25987 (syz-executor.0) did not claim interface 0 before use 13:29:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4800, 0x0, 0x0}) [ 2257.422367][T25989] device batadv0 entered promiscuous mode 13:29:11 executing program 4: r0 = dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001440)={0x9, 0x0, 0x4, 0x8, 0xfff}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) sendfile(r0, r1, 0x0, 0x1) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x7, @empty, 0x2}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x3, [0x20, 0x40, 0xffff, 0x5, 0x80, 0x4, 0xffff71e9, 0x7a0925d4]}, 0x5c) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) 13:29:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfda6) r4 = pidfd_getfd(r3, r2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000004c0), 0xc, &(0x7f0000000dc0)={&(0x7f0000000540)={0x41c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3e8, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_b, @broadcast, {0x1}}, @random="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"}}]}, 0x41c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') timerfd_gettime(r6, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x5c, 0x0, 0x0, 0x4070bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7a}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x5c}}, 0xc088054) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8844) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x10, 0x2a, [@cf={0x4, 0x6, {0x9, 0x9, 0xcaef, 0x5}}, @ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x9, 0x34, @random="debe652d6d"}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x70}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12}, @dsss={0x3, 0x1, 0xb7}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a3c287c4c4d5"}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2257.465014][T25996] MPTCP: kernel_bind error, err=-98 13:29:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x4c00000000000000}, 0x0) [ 2257.465622][T25997] MPTCP: kernel_bind error, err=-98 [ 2257.524112][T25989] device batadv0 left promiscuous mode [ 2257.600417][T25991] device batadv0 entered promiscuous mode [ 2257.631781][T25991] device batadv0 left promiscuous mode 13:29:11 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2257.662834][T26002] usb usb9: usbfs: process 26002 (syz-executor.0) did not claim interface 0 before use 13:29:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x800, 0x1, 0xfffffffe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:11 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4c00, 0x0, 0x0}) 13:29:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x80c00) 13:29:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x506f000000000000}, 0x0) [ 2257.779646][T26011] MPTCP: kernel_bind error, err=-98 13:29:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6000, 0x0, 0x0}) [ 2257.780103][T26012] MPTCP: kernel_bind error, err=-98 [ 2257.912873][T26019] usb usb9: usbfs: process 26019 (syz-executor.0) did not claim interface 0 before use [ 2257.915199][T26015] device batadv0 entered promiscuous mode [ 2257.936400][T26018] MPTCP: kernel_bind error, err=-98 13:29:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2257.937432][T26020] MPTCP: kernel_bind error, err=-98 [ 2257.959856][T26015] device batadv0 left promiscuous mode [ 2257.996844][T26023] usb usb9: usbfs: process 26023 (syz-executor.4) did not claim interface 0 before use [ 2258.008678][T26025] usb usb9: usbfs: process 26025 (syz-executor.4) did not claim interface 0 before use 13:29:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000140)={{{0x1, 0x1}}, 0x34, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000180)={0xd29, "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"}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x1) [ 2258.076742][T26026] device batadv0 entered promiscuous mode [ 2258.102951][T26026] device batadv0 left promiscuous mode 13:29:12 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xb000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6000000000000000}, 0x0) [ 2258.136955][T26028] MPTCP: kernel_bind error, err=-98 13:29:12 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2258.137447][T26029] MPTCP: kernel_bind error, err=-98 [ 2258.248859][T26035] usb usb9: usbfs: process 26035 (syz-executor.0) did not claim interface 0 before use 13:29:12 executing program 2: socketpair(0xf, 0x800, 0xfffffffb, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000003c0)='ipvlan1\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ab690000000095ceaa6b305306d10b00018006000100000000e86e192f0d881cac4542c26a00"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x38}}, 0x0) [ 2258.294107][T26040] MPTCP: kernel_bind error, err=-98 13:29:12 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6800, 0x0, 0x0}) 13:29:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6800000000000000}, 0x0) [ 2258.294966][T26041] MPTCP: kernel_bind error, err=-98 [ 2258.344090][T26042] device batadv0 entered promiscuous mode [ 2258.364142][T26043] usb usb9: usbfs: process 26043 (syz-executor.4) did not claim interface 0 before use [ 2258.384240][T26042] device batadv0 left promiscuous mode [ 2258.392314][T26043] usb usb9: usbfs: process 26043 (syz-executor.4) did not claim interface 0 before use [ 2258.402139][ T24] audit: type=1400 audit(1636637352.377:815): avc: denied { setattr } for pid=26039 comm="syz-executor.4" name="autofs" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 13:29:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) preadv2(r1, &(0x7f0000000080), 0x0, 0x4, 0x3, 0x10) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2258.499384][T26044] device batadv0 entered promiscuous mode [ 2258.523899][T26044] device batadv0 left promiscuous mode 13:29:12 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2258.566764][T26050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2258.591018][T26051] usb usb9: usbfs: process 26051 (syz-executor.0) did not claim interface 0 before use 13:29:12 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6c00, 0x0, 0x0}) 13:29:12 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2258.610249][T26053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:29:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 13:29:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x6c00000000000000}, 0x0) [ 2258.674808][T26058] MPTCP: kernel_bind error, err=-98 [ 2258.675465][T26059] MPTCP: kernel_bind error, err=-98 [ 2258.688616][ T1825] ================================================================== [ 2258.701901][ T1825] BUG: KCSAN: data-race in ext4_mark_iloc_dirty / ext4_mark_iloc_dirty [ 2258.710152][ T1825] [ 2258.712665][ T1825] write to 0xffff888139566508 of 4 bytes by task 15305 on cpu 0: [ 2258.720390][ T1825] ext4_mark_iloc_dirty+0x789/0x890 [ 2258.725600][ T1825] ext4_orphan_del+0x593/0x730 [ 2258.730373][ T1825] ext4_evict_inode+0xb9f/0xf10 [ 2258.735223][ T1825] evict+0x1aa/0x410 [ 2258.739116][ T1825] iput+0x3ef/0x580 [ 2258.742921][ T1825] do_unlinkat+0x2d4/0x540 [ 2258.747355][ T1825] __x64_sys_unlink+0x2c/0x30 [ 2258.752028][ T1825] do_syscall_64+0x44/0xd0 [ 2258.756443][ T1825] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2258.762337][ T1825] [ 2258.764681][ T1825] write to 0xffff888139566508 of 4 bytes by task 1825 on cpu 1: [ 2258.772311][ T1825] ext4_mark_iloc_dirty+0x789/0x890 [ 2258.777544][ T1825] __ext4_mark_inode_dirty+0x4ec/0x5f0 [ 2258.783004][ T1825] ext4_evict_inode+0x9ae/0xf10 [ 2258.788540][ T1825] evict+0x1aa/0x410 [ 2258.792426][ T1825] iput+0x3ef/0x580 [ 2258.796233][ T1825] dentry_unlink_inode+0x23d/0x250 [ 2258.801335][ T1825] d_delete+0x78/0xa0 [ 2258.805307][ T1825] vfs_rmdir+0x2bf/0x2e0 [ 2258.809539][ T1825] do_rmdir+0x18d/0x330 [ 2258.813687][ T1825] __x64_sys_rmdir+0x2c/0x30 [ 2258.818274][ T1825] do_syscall_64+0x44/0xd0 [ 2258.822715][ T1825] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2258.828600][ T1825] [ 2258.830921][ T1825] value changed: 0x0002d3cd -> 0x0002d3ce [ 2258.836753][ T1825] [ 2258.839060][ T1825] Reported by Kernel Concurrency Sanitizer on: [ 2258.845194][ T1825] CPU: 1 PID: 1825 Comm: syz-executor.1 Tainted: G W 5.15.0-syzkaller #0 [ 2258.854921][ T1825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2258.864980][ T1825] ================================================================== 13:29:12 executing program 4: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x0) flock(r0, 0x9) [ 2258.899936][T26061] usb usb9: usbfs: process 26061 (syz-executor.4) did not claim interface 0 before use [ 2258.979099][T26064] device batadv0 entered promiscuous mode [ 2259.004579][T26064] device batadv0 left promiscuous mode [ 2259.061273][T26069] usb usb9: usbfs: process 26069 (syz-executor.0) did not claim interface 0 before use 13:29:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7400, 0x0, 0x0}) [ 2259.118606][T26068] device batadv0 entered promiscuous mode [ 2259.148675][T26068] device batadv0 left promiscuous mode [ 2259.161346][T26073] MPTCP: kernel_bind error, err=-98 13:29:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="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", 0xfc, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r1, 0x1) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800fc62cb49f3952275e230ca6635eb42116c214e0000", @ANYRES16=r4, @ANYBLOB="01000000002fc3c70dc0195ebc00240001800800060005000000060005004e200000060001000200000008000300000000002626aed6cbca3cc4aa3947afb8cf2f9f661f6ea292a6d7e8f14056b0341b1dd159749fca4975d42dd0bda95ffcf1d9e0010639b835b53711ed180b96da593783401b7fcba5da66507a58bf5acdc2f9a9ed59429a351121580886f0ecf2868a8aee2f3d88e494d3493c1153abdd6a700e31288da3c1e605"], 0x38}}, 0x0) 13:29:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7400000000000000}, 0x0) 13:29:13 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xd000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:13 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:13 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000080)={0x21af, 0x18, [{0x9, 0x1}, {0x5}, {0xc}, {0x8}, {0xd}, {0xd}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0xa}, {0xb, 0x1}, {0x2}, {0x4}, {0xa, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {}, {0x1, 0x1}, {0xb, 0x1}, {0xb, 0x1}, {0xf}, {0xb}]}) sendfile(r1, r0, 0x0, 0x100000001) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x4, 0x0}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000100)=0x4fea) [ 2259.161917][T26074] MPTCP: kernel_bind error, err=-98 [ 2259.327153][T26086] usb usb9: usbfs: process 26086 (syz-executor.0) did not claim interface 0 before use 13:29:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7a00, 0x0, 0x0}) 13:29:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x0) [ 2259.376642][T26093] MPTCP: kernel_bind error, err=-98 13:29:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x7a00000000000000}, 0x0) 13:29:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000008000000000000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="bb5a343bb27d2cee830a417f7366e22f824ad85ed164eb661e0004000000008000502f66696ca8be1315b6858f316c9811653100"]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000001c0)={0xb0002012}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0xfc175244ed4abe7f) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0xd, 0x1}, 0x3, 0x1, &(0x7f0000000140)="3778449c0f441adefa5836b62d24601cd3", 0x11, 0x4, 0xffff, 0x81, 0x4, 0x3, &(0x7f0000000300)="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"}) ioctl$USBDEVFS_BULK(r3, 0x80045503, &(0x7f0000000100)={{{0x1, 0x1}}, 0xffffffffffffff79, 0x8, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r6, r5, 0x0, 0x100000001) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000400)=""/129, 0x81) [ 2259.377107][T26094] MPTCP: kernel_bind error, err=-98 [ 2259.421026][T26095] device batadv0 entered promiscuous mode [ 2259.450529][T26095] device batadv0 left promiscuous mode [ 2259.540812][T26096] device batadv0 entered promiscuous mode [ 2259.566271][T26096] device batadv0 left promiscuous mode 13:29:13 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x11000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:13 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x220800, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r5, r2, 0x0, 0x100000001) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x406485}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xf8, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x43}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x43}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) 13:29:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x8000000000000000}, 0x0) 13:29:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x20000, 0x0, 0x0}) [ 2259.734426][T26107] MPTCP: kernel_bind error, err=-98 [ 2259.734787][T26109] MPTCP: kernel_bind error, err=-98 [ 2259.740301][T26108] usb usb9: usbfs: process 26108 (syz-executor.0) did not claim interface 0 before use 13:29:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x1, 0x7, &(0x7f0000000180)="a165b9866bc5631a9fdfdd4ab2e81325acef"}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x8000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x200}, {r1, 0x69}, {r0, 0x1100}, {r0, 0x8}, {r2, 0x102}, {r0, 0xc3a2}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)={[0x3]}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x5850e849394c2c5c, 0x0, 0x6, 0x80, 0x0, &(0x7f0000000100)="5b873ca1e3f8b5ea101146acbf8fcc01980250bd4167bb6b235ca633ca76d94fe4ba5345d9f227ed8219b4bf864e9b4b81b8d098ebe6cc223c02c21c39656a66acf9b3f1564f998da9f55d024fcd65b03efc3c500935b35aa6d898ea5340a51fab3de1338067648a4eb289314f00017c21c21d781ebd4e77f18e8a79db349845"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2259.868039][T26116] device batadv0 entered promiscuous mode [ 2259.890549][T26116] device batadv0 left promiscuous mode [ 2259.959293][T26115] device batadv0 entered promiscuous mode [ 2259.989626][T26115] device batadv0 left promiscuous mode 13:29:14 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0xf000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:14 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x12000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2260.140514][T26125] usb usb9: usbfs: process 26125 (syz-executor.0) did not claim interface 0 before use [ 2260.154442][T26126] MPTCP: kernel_bind error, err=-98 [ 2260.154712][T26127] MPTCP: kernel_bind error, err=-98 [ 2260.163566][T26128] MPTCP: kernel_bind error, err=-98 13:29:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x9effffff00000000}, 0x0) 13:29:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x1000000, 0x0, 0x0}) 13:29:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000dad3623be33f75084f7a2c"]) ioctl$USBDEVFS_BULK(r1, 0x80045503, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:29:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="faffffff72ad55efbffef77ad8a1933639e9a6392ecb9c5520bdeb8c9bf3974cec4d2169f6dff7329cbaa87b59a4391ed97a9cf99d12f2786be66ff67fb9ab94af883d8bfd178b471dfce879eb06d4712a9b40fc6622f2309bc7ce36968499e387fc493ba1453ce6fcdc67b6ce35e303b7e95ca9d64df7279eecf4dc3662d0b103853d689550c1b342dc5b", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25020000000800030008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2260.176540][ T24] audit: type=1400 audit(1636637354.157:816): avc: denied { append } for pid=26124 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2260.284993][T26135] device batadv0 entered promiscuous mode [ 2260.308222][T26135] device batadv0 left promiscuous mode 13:29:14 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2260.383348][T26136] device batadv0 entered promiscuous mode [ 2260.408048][T26136] device batadv0 left promiscuous mode 13:29:14 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x12020000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/115, 0x73}], 0x1, &(0x7f0000000280)=""/205, 0xcd}, 0x140) 13:29:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x2000000, 0x0, 0x0}) 13:29:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xa7ffffff00000000}, 0x0) [ 2260.491555][T26144] usb usb9: usbfs: process 26144 (syz-executor.0) did not claim interface 0 before use [ 2260.502214][T26143] MPTCP: kernel_bind error, err=-98 [ 2260.503305][T26145] MPTCP: kernel_bind error, err=-98 [ 2260.511347][T21743] unregister_netdevice: waiting for geneve1 to become free. Usage count = 2 13:29:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x204a80) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"78d57201b971b8036803c4470f2a8a02", r1, 0x0, {0xfffffffffffffffb}, {0x9e, 0x8}, 0x9, [0x0, 0xffffffffffffff5d, 0x4, 0x6, 0x8, 0x7fff, 0x8, 0x4, 0x2, 0x100000001, 0x1, 0x7, 0x6, 0x8, 0x8000, 0x5]}) [ 2260.529017][T26146] MPTCP: kernel_bind error, err=-98 [ 2260.684804][T26153] device batadv0 entered promiscuous mode [ 2260.713912][T26153] device batadv0 left promiscuous mode [ 2260.786395][T26157] device batadv0 entered promiscuous mode [ 2260.815217][T26157] device batadv0 left promiscuous mode 13:29:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="556552f5d656b14bbe940784a20000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000004900080026bd7000fedbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000b000000080002000700000014000100fc00000000000000000000000000000183eadfaedcc8d3432b1946fd1750b7f209cdea34e30000d86b0bbab2874eae0b54d491364dfd196bba7accbedd40ab913cb7ef988bdcf6051f7e11857c8f"], 0x40}}, 0x24044014) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = signalfd4(r0, &(0x7f0000000540)={[0x9c]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_delroute={0x6c, 0x19, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x5, 0xff, 0x4, 0xc8, 0x8, 0x200}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x3, 0x20, r8}}, @RTA_GATEWAY={0x14, 0x5, @private0}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @RTA_PREF={0x5, 0x14, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 13:29:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xefffffff00000000}, 0x0) 13:29:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x5, 0x0, 0x9, 0x3d7, 0x11, 0x2, &(0x7f00000001c0)="c2352083937db58359692289300c724529"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000240)={{r0}, "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"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') finit_module(r4, &(0x7f0000000140)='J\x00', 0x3) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x20) [ 2260.846823][T26160] MPTCP: kernel_bind error, err=-98 [ 2260.849717][T26159] MPTCP: kernel_bind error, err=-98 [ 2260.855180][T26161] MPTCP: kernel_bind error, err=-98 [ 2260.861730][T26162] usb usb9: usbfs: process 26162 (syz-executor.0) did not claim interface 0 before use 13:29:14 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x11000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x3000000, 0x0, 0x0}) 13:29:14 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1e030000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2260.879146][T26163] MPTCP: kernel_bind error, err=-98 [ 2261.012955][T26171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2261.043365][T26173] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:29:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x10000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800031b0000000049157890888a806f01ad5cab440c17e49598b1780cb9bb092c6f89e9e5e1412cb08d85ef00ed00710fa2d61732a07a92289d40d3f8bbb457f2ef9bf47ed079e251a159af81268052aedc89b7ce9a2b9b2100d4fab3c3df8e6a1f8f27b42b0d0ccfd721a5aebfc1da9c59f4079dc105"], 0x38}}, 0x0) [ 2261.068844][T26176] usb usb9: usbfs: process 26176 (syz-executor.4) did not claim interface 0 before use [ 2261.081069][T26177] MPTCP: kernel_bind error, err=-98 [ 2261.081629][T26180] MPTCP: kernel_bind error, err=-98 [ 2261.086252][T26176] usb usb9: usbfs: process 26176 (syz-executor.4) did not claim interface 0 before use 13:29:15 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x14015}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c4000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x14015}, 0x0) r6 = syz_io_uring_complete(r3) ioctl$USBDEVFS_BULK(r6, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x4, 0x0}) 13:29:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xf0ffffff00000000}, 0x0) [ 2261.139491][T26182] device batadv0 entered promiscuous mode [ 2261.165146][T26182] device batadv0 left promiscuous mode [ 2261.189703][T26184] usb usb9: usbfs: process 26184 (syz-executor.0) did not claim interface 0 before use 13:29:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x4000000, 0x0, 0x0}) 13:29:15 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2261.231679][T26179] device batadv0 entered promiscuous mode [ 2261.261236][T26179] device batadv0 left promiscuous mode 13:29:15 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x12000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) 13:29:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xce}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x5, 0x0, 0x9, 0x8, 0xde, 0xfffffffc, &(0x7f0000000100)="f75ea431b16f6eced177e36b7dbd662beb2a0c3576c3a650c040c0432fd9cec69c5dbc9258f1debd9c738a8067e5c0cf43c8aceee4b683e37b7112cc0313705b57af515190eb5fe05792d03cd4fd5e26fb31958f9123848fcc3b1690e21c5756658c07d6685e82ae84fe9959314b2e381e3d7b6bc1f55c2d4198b13c920a5d7c10ca327563aa23a5c8c7c02288a37eb9c046d0d70112193f13464f03e9534cf134fe5e3294bcb71e5e575b72306cc37d5a461ff167c88f7a1b3b4e0c943c87e51cbefd176f57c34c7e991a2cf9907e698e3cdb3ccb7c82bec6f43c0d1dbf"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:29:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xfeffffff00000000}, 0x0) 13:29:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x5000000, 0x0, 0x0}) [ 2261.459009][T26197] MPTCP: kernel_bind error, err=-98 [ 2261.459766][T26199] MPTCP: kernel_bind error, err=-98 [ 2261.471708][T26200] usb usb9: usbfs: process 26200 (syz-executor.0) did not claim interface 0 before use 13:29:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x54}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2261.544251][T26205] MPTCP: kernel_bind error, err=-98 [ 2261.545367][T26206] MPTCP: kernel_bind error, err=-98 [ 2261.555040][T26203] device batadv0 entered promiscuous mode [ 2261.590456][T26203] device batadv0 left promiscuous mode [ 2261.650600][T26207] device batadv0 entered promiscuous mode [ 2261.673282][T26207] device batadv0 left promiscuous mode 13:29:15 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x21000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:15 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x12020000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xff0f000000000000}, 0x0) [ 2261.833493][T26215] MPTCP: kernel_bind error, err=-98 [ 2261.833988][T26216] MPTCP: kernel_bind error, err=-98 [ 2261.834493][T26214] usb usb9: usbfs: process 26214 (syz-executor.4) did not claim interface 0 before use [ 2261.865728][T26217] usb usb9: usbfs: process 26217 (syz-executor.0) did not claim interface 0 before use 13:29:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x1, 0x0}) 13:29:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000073dc0bc0a5d04e65b2082cb0da9ddef03e68e6062b4850fe17080c8b155357e704000000302d2c7672c5f733938f9dcd1620c29a857ecb237f0d3b7a5d8756c58dd3e69916a3d1f8cb85b26c7893b7098b7abd41ab34e50c4a50cd39fb2339c2fcc038d381c2a7783d93b9ba9f19ba12d7df149db7e3cb08959de28cf7e0e95ee6ccaea95acdc668176ed25e6b8393e9e3d882c963fc91841905a30396f7ace0e9e84929739960cbdf383f9e7de9ddba6e00000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) [ 2261.879919][T26218] MPTCP: kernel_bind error, err=-98 13:29:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x6000000, 0x0, 0x0}) [ 2261.880848][T26220] MPTCP: kernel_bind error, err=-98 [ 2261.973332][T26224] device batadv0 entered promiscuous mode [ 2262.003779][T26224] device batadv0 left promiscuous mode 13:29:16 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x25000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2262.061150][T26225] device batadv0 entered promiscuous mode [ 2262.086011][T26225] device batadv0 left promiscuous mode 13:29:16 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x1e030000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xffffff7f00000000}, 0x0) [ 2262.212301][T26230] MPTCP: kernel_bind error, err=-98 13:29:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x7000000, 0x0, 0x0}) 13:29:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060005004e20000006000100020000000800030000000000"], 0x38}}, 0x0) 13:29:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{r0}, "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"}) [ 2262.212934][T26231] MPTCP: kernel_bind error, err=-98 [ 2262.285864][T26237] usb usb9: usbfs: process 26237 (syz-executor.0) did not claim interface 0 before use [ 2262.301963][T26236] usb usb9: usbfs: process 26236 (syz-executor.4) did not claim interface 0 before use [ 2262.402978][T26241] device batadv0 entered promiscuous mode [ 2262.425839][T26241] device batadv0 left promiscuous mode 13:29:16 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2e030000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2262.485636][T26242] device batadv0 entered promiscuous mode [ 2262.508936][T26242] device batadv0 left promiscuous mode 13:29:16 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0xffffffff00000000}, 0x0) [ 2262.592507][T26252] MPTCP: kernel_bind error, err=-98 13:29:16 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="dc558000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf250e00f023b07d0600080000000800050003000000080006001e0600007000018008000b0073697000140003006401e568a5e159b56c24b793a18d01000000000000000000000000000cc589f575a1292bf8833b00070000000000300000000800000014000300fe880000000000000000000000000001060000000020000008000800090000000800050002000000080008000700000038000380060007004e23000008000500ac14140a1400060000000000000000000000000000000001080003000100000005000800"], 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"/287], 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r0, 0x1, 0xfffffffc, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x0, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x0) [ 2262.593291][T26253] MPTCP: kernel_bind error, err=-98 [ 2262.647198][T26259] usb usb9: usbfs: process 26259 (syz-executor.0) did not claim interface 0 before use [ 2262.664776][T26258] usb usb9: usbfs: process 26258 (syz-executor.4) did not claim interface 0 before use 13:29:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x8000000, 0x0, 0x0}) 13:29:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2262.689155][T26258] usb usb9: usbfs: process 26258 (syz-executor.4) did not claim interface 0 before use [ 2262.807572][T26262] device batadv0 entered promiscuous mode [ 2262.832770][T26262] device batadv0 left promiscuous mode 13:29:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x2}, 0x0) [ 2262.922285][T26265] device batadv0 entered promiscuous mode [ 2262.929922][T26268] MPTCP: kernel_bind error, err=-98 [ 2262.937023][T26270] MPTCP: kernel_bind error, err=-98 [ 2262.946039][T26271] usb usb9: usbfs: process 26271 (syz-executor.0) did not claim interface 0 before use 13:29:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x9000000, 0x0, 0x0}) 13:29:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2262.980434][T26265] device batadv0 left promiscuous mode 13:29:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x27, 0x3, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r6, r5, 0x0, 0x100000001) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000340), &(0x7f00000003c0)={'L+', 0x5}, 0x16, 0x3) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r8, 0x3c2e60e28f3e69ab, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x60}}, 0x851) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="0000000000000000000000000b0001f9656c6f776572000004000200"], 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf25a4960c6d4b5c06000000080006ee", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000808}, 0x20008000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}}, 0x0) 13:29:17 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x3}, 0x0) 13:29:17 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x21000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 4: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x412080, 0x4, 0x8}, 0x18) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x2000, 0x4) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r1, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2263.129330][T26284] usb usb9: usbfs: process 26284 (syz-executor.4) did not claim interface 0 before use [ 2263.140131][T26285] usb usb9: usbfs: process 26285 (syz-executor.0) did not claim interface 0 before use 13:29:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xa000000, 0x0, 0x0}) [ 2263.184765][T26288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2263.212001][T26288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x4}, 0x0) 13:29:17 executing program 2: setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x2, 'gre0\x00', {0x10000}, 0x1}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) [ 2263.267393][T26291] device batadv0 entered promiscuous mode [ 2263.295401][T26291] device batadv0 left promiscuous mode [ 2263.399219][T26295] device batadv0 entered promiscuous mode [ 2263.423022][T26295] device batadv0 left promiscuous mode [ 2263.439959][T26298] usb usb9: usbfs: process 26298 (syz-executor.4) did not claim interface 0 before use 13:29:17 executing program 4: process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000001c0)=""/102, 0x66}, {&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000002c0)=""/36, 0x24}], 0x6, &(0x7f0000000400)=[{&(0x7f0000000380)=""/75, 0x4b}], 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 13:29:17 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x34010000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x25000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xb000000, 0x0, 0x0}) 13:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x5}, 0x0) 13:29:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2263.461791][T26302] usb usb9: usbfs: process 26302 (syz-executor.0) did not claim interface 0 before use [ 2263.496555][T26305] MPTCP: kernel_bind error, err=-98 13:29:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='.file8\x00\x00']) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3506}}, './file0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) write$P9_RMKDIR(r6, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x20}}, 0x14) sendfile(r5, r4, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r9 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r9, r8, 0x0, 0x100000001) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000240)={r8, r4}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000080)={0x749c, 0x1c, [{0xc, 0x1}, {0xf}, {0xe, 0x1}, {0x3, 0x1}, {0xe}, {0x4}, {0x1}, {0x5, 0x1}, {0xf, 0x1}, {0xe, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0xf, 0x1}, {0x5}, {0xe}, {0xd}, {0xe, 0x1}, {0x3, 0x1}, {0xf}, {0x7}, {0xb, 0x1}, {0xc, 0x1}, {0x1}, {0x8, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x7}]}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2263.498894][T26305] MPTCP: kernel_bind error, err=-98 [ 2263.593687][T26310] usb usb9: usbfs: process 26310 (syz-executor.4) did not claim interface 0 before use [ 2263.610560][T26313] usb usb9: usbfs: process 26313 (syz-executor.4) did not claim interface 0 before use [ 2263.690090][T26317] device batadv0 entered promiscuous mode [ 2263.711176][T26317] device batadv0 left promiscuous mode 13:29:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xc000000, 0x0, 0x0}) 13:29:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800800060005000000060015004e20000006000100020000000800030000000000"], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r3, r2, 0x0, 0x100000001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62}, [@jmp={0x5, 0x0, 0x6, 0x4, 0x0, 0xc, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x39}, @alu={0x4, 0x1, 0x3, 0x2, 0x7, 0x50, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x475, 0x0, 0x0, 0x41100, 0x1, '\x00', r7, 0x18, r2, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x9, 0x9, 0x2}, 0x10, 0x10ebc, r2}, 0x78) [ 2263.775003][T26316] device batadv0 entered promiscuous mode [ 2263.785800][T26319] usb usb9: usbfs: process 26319 (syz-executor.0) did not claim interface 0 before use [ 2263.803335][T26316] device batadv0 left promiscuous mode 13:29:17 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3a000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2e030000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x6}, 0x0) 13:29:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(r2, r1, 0x0, 0x100000001) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 2263.970115][T26327] usb usb9: usbfs: process 26327 (syz-executor.4) did not claim interface 0 before use 13:29:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xd000000, 0x0, 0x0}) 13:29:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x7}, 0x0) [ 2264.036027][T26335] usb usb9: usbfs: process 26335 (syz-executor.0) did not claim interface 0 before use [ 2264.051595][T26336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.128037][T26337] device batadv0 entered promiscuous mode [ 2264.153115][T26337] device batadv0 left promiscuous mode [ 2264.161817][T26343] usb usb9: usbfs: process 26343 (syz-executor.4) did not claim interface 0 before use [ 2264.173928][T26343] usb usb9: usbfs: process 26343 (syz-executor.4) did not claim interface 0 before use 13:29:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x7f, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x3e00, 0x7f, 0xff, 0x3, &(0x7f0000000100)="e781369d65e7dd4e5b9c29fa1a0e446eef8ddd8ed50d1fa832083daca4dc4da1962366e5e48b5c1dc562cf929a6841855ece3cab06ecb86c6b595e41732e963e5a0f63c4b3f0aeccfe2a7604567c6d613d311cc84d56b7ab5a89f623ee951ac298839a145352b1538de4c3d12f04de104f42378dc130c4a59f0844268af33de04caa38741b685c1656cf9c446d371aac9181b1d2443696a7c7a744a1fd4441c941a64063a06adea0e056ca1026641391e4251198df6851d2fa8d87230ae03787b3579bff9c41a8697a20e22264b43d457873eb09af6010251d239fac2402aa5bef501949e8c2d24433c9ce895df31a2e89de23cdb86704f9d36ef055be4913"}) syz_open_dev$usbfs(&(0x7f0000000080), 0x3, 0x1e1080) 13:29:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x8}, 0x0) [ 2264.222233][T26338] device batadv0 entered promiscuous mode [ 2264.247583][T26338] device batadv0 left promiscuous mode 13:29:18 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x2f000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:18 executing program 5: socket$kcm(0x29, 0x1000000000002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 13:29:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f000000dfc0), r0) sendfile(r1, r0, 0x0, 0x100000001) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000180)={0x92f, 0x7ff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f000000de00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f000000df80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000df40)={&(0x7f000000de40)={0xf4, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x44}, 0x20048000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000040)={0x0, 0x2040000, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}}, 0x0) [ 2264.281572][T26336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.308677][T26354] usb usb9: usbfs: process 26354 (syz-executor.0) did not claim interface 0 before use 13:29:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xe000000, 0x0, 0x0}) 13:29:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x81, &(0x7f00000001c0)="cb615509fdf598334bf78d954c88fb770349b29beb0987250904b1f5"}) finit_module(r0, &(0x7f0000000240)='%(:%#,[*&*-%]^]%/{\x00', 0x3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x60, 0x9, 0x3ff, 0x7, 0x54, 0xffffffff, &(0x7f0000000100)="1ca071b5cb19d468e41a4c323fee8939e70d6c627a85bab02e82f949615fb69b0f05cda19b567deee77bf2a4d9e23eb053db6fcb7449ed58f8dd13ce790e52c651f0dfc78256acd7ccb1d9accadf7590dcfe9e57"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x0, 0x16, 0x8000, 0x2605, 0x35, 0x1f, &(0x7f0000000080)="9fe7c84e83a3b48993b3b47dcedaf3324be39e5502f5c94096962f4a1d07b4b55c9e872b5cfc7ff2bb4a836e152791aa040da575ee"}) 13:29:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0x9}, 0x0) [ 2264.406030][T26357] usb usb9: usbfs: process 26357 (syz-executor.4) did not claim interface 0 before use [ 2264.420179][T26357] usb usb9: usbfs: process 26357 (syz-executor.4) did not claim interface 0 before use [ 2264.500080][T26364] device batadv0 entered promiscuous mode [ 2264.524067][T26364] device batadv0 left promiscuous mode [ 2264.570054][T26366] MPTCP: kernel_bind error, err=-98 13:29:18 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d6, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff0f, 0x34010000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) [ 2264.571788][T26368] MPTCP: kernel_bind error, err=-98 [ 2264.595652][T26369] usb usb9: usbfs: process 26369 (syz-executor.0) did not claim interface 0 before use [ 2264.625583][T26367] device batadv0 entered promiscuous mode 13:29:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0xa}, 0x0) 13:29:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0xf000000, 0x0, 0x0}) [ 2264.686402][T26367] device batadv0 left promiscuous mode [ 2264.686449][T26377] usb usb9: usbfs: process 26377 (syz-executor.4) did not claim interface 0 before use [ 2264.686622][T26377] vhci_hcd: default hub control req: 6009 v03ff i0007 l84 [ 2264.745455][T26377] vhci_hcd: default hub control req: 0016 v8000 i0005 l53 [ 2264.772696][T26377] usb usb9: usbfs: process 26377 (syz-executor.4) did not claim interface 0 before use [ 2264.803931][T26379] device batadv0 entered promiscuous mode [ 2264.813225][T26382] vhci_hcd: default hub control req: 6009 v03ff i0007 l84 13:29:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x60, 0x17, 0x40, 0x6b80, 0x4c, 0x9b0, &(0x7f0000000100)="54937bfbb0a6d6975fc821de16f2e3ab03d75f9856fea26cf93b6b12750775e6712bffe42a6b5bce34b1f9bf971c9973ae830933a2d5200aa6bd935dafecdac6f47def7c2ef70d79df5564a6"}) ioctl$USBDEVFS_BULK(r0, 0x80045503, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 2264.858060][T26379] device batadv0 left promiscuous mode [ 2264.892051][T26384] usb usb9: usbfs: process 26384 (syz-executor.0) did not claim interface 0 before use 13:29:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0xefffffff}]}]}, 0x38}, 0x1, 0x0, 0xb}, 0x0) [ 2264.958550][T26387] device batadv0 entered promiscuous mode 13:29:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x281) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000040)={{{0x1, 0x1}}, 0x10000000, 0x0, 0x0}) [ 2265.010767][T26390] vhci_hcd: invalid port number 128 [ 2265.016137][T26390] vhci_hcd: default hub control req: 6017 v0040 i0080 l76 [ 2265.041685][T26390] usb usb9: usbfs: process 26390 (syz-executor.4) did not claim interface 0 before use 13:29:19 executing program 1: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf