x17, 0x9) 21:43:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x234103) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r0, 0x5) read$usbfs(r0, &(0x7f0000000000)=""/241, 0xf1) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000140)) 21:43:31 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xc7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xffffffff}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:43:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2000) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f00000001c0)=0xfff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x8ac, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x27}}}}, [@NL80211_ATTR_TX_RATES={0x444, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0x6}, {0x6, 0x8}, {0x2}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x2, 0x30, 0x9, 0x62, 0x9, 0x30, 0x2, 0x48, 0x1b, 0x1a, 0x0, 0x6c, 0x1b, 0x6, 0x4, 0x60, 0x12, 0x4, 0x60, 0x16, 0x0, 0x1, 0x1, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xff80, 0x1, 0xec0f, 0x4c3, 0x2be1, 0xe1]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x16, 0x3, 0x12, 0x3, 0x12, 0x1d, 0x3, 0x60, 0x24, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x5, 0x4, 0x1, 0x8f49, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x60, 0x6c, 0x48, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3, 0x9, 0x9, 0x800, 0xfffd, 0x5, 0x5b8c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf7b, 0x1, 0xfff8, 0x7, 0x2, 0xb4, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xff81, 0x8001, 0x8, 0x34, 0x5, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x2, 0x5}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x2, 0x8}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x7}, {0x7, 0xa}, {0x3, 0xa}, {0x4}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x8}, {0x6}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x4}, {0x3, 0x5}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x7}, {0x7, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {}, {0x1, 0x1a}, {0x2, 0x8}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x9, 0x2, 0x2, 0xfff, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0xeb, 0x101, 0x3, 0x1000, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x3, 0x1f, 0x8, 0x3d1, 0x1ff, 0x7, 0x3ff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x3}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x3, 0x6, 0x200, 0xd4d0, 0x9, 0xd06]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x36, 0x5c, 0x6f, 0x6, 0x5, 0x61, 0x60, 0x2, 0xb, 0x4, 0x48, 0x3, 0x16, 0x2, 0x12, 0xc, 0x6, 0x1, 0x30, 0x18, 0x60, 0xb, 0xc, 0x12]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0xa}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x1}, {0x6, 0x3}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0xa}, {0x5}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x6}, {0x5}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x6}, {0x4, 0x9}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x6}, {}, {0x6, 0x8}, {0x0, 0x6}, {0x6}, {0x1, 0xa}, {0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x1}, {0x3, 0x4}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x9}, {}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2d, 0x24, 0x60, 0x60, 0xc, 0x1e, 0xc, 0xc, 0xb, 0xc, 0x5, 0x6, 0x9, 0x12, 0x6c, 0x3d, 0x1, 0x60, 0x30, 0x3, 0x9, 0x0, 0x16, 0x36, 0x6, 0x12, 0x4, 0x60, 0x9, 0x18, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x81, 0x6, 0x8, 0x2, 0xeb1b, 0x7ff, 0xc9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x17, 0x6c, 0x6, 0x2, 0x1b, 0x1, 0x60, 0x6, 0x1, 0x3, 0x6, 0x18, 0xb, 0x5, 0x1, 0x24, 0x16, 0x0, 0x9, 0x5, 0x1, 0xb, 0x0, 0x0, 0x6c]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x3, 0x0, 0x24, 0x24, 0x4, 0x36, 0x30, 0x12, 0x5, 0x2, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x6}, {0x2, 0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0xa}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1800, 0x4, 0xfffd, 0x9, 0x40b3, 0x9, 0x7, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x899, 0x9, 0x934, 0x800, 0x8, 0xee25, 0x401, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0x5, 0x8, 0x81, 0x9, 0xb4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8, 0x8, 0x4, 0x800, 0x0, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x2}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0xf}, {0x1, 0x8}, {0x6, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x4}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x3}, {0x2, 0x4}, {0x3, 0x9}, {0x2}, {0x6, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x1}, {0x3, 0x4}, {0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x6}, {0x4}, {0x2, 0x5}, {0x2, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x4}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0x3}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x2}, {0x1}, {0x0, 0x5}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x8}, {0x1, 0x6}, {0x3, 0x4}, {0x4, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0xa}, {0x4, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0x9}, {0x3, 0x9}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x100, 0x401, 0x7ff, 0x8, 0x3ff, 0x1, 0x20]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x9}, {0x5, 0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x3, 0x8}, {0x2, 0x9}, {0x4, 0xa}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x6}, {0x2, 0x1c}, {0x2, 0x4}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0xa}, {0x7}, {0x5, 0x4}, {0x7, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x6}, {0x7, 0x5}, {0x4, 0x6}, {0x2, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0x5}, {0x6}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6c, 0x24, 0x4, 0x5, 0x4, 0x3f, 0x3, 0x22, 0xc, 0x1, 0xb, 0x48, 0x36, 0x16]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x30, 0x3, 0x4, 0x48, 0x60, 0x9, 0x60, 0x36, 0x3, 0x2, 0x60, 0x16, 0x3, 0x12, 0x6, 0x60, 0x2, 0x36, 0xb, 0x4, 0x18, 0x32]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x4, 0x1, 0x3ff, 0x401, 0x1ff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x100, 0x1ff, 0x6f9, 0x20, 0x1ff, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x448, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x4, 0x5, 0x16, 0x9, 0x48, 0x5, 0x24, 0xb, 0x6c, 0x4, 0x6, 0x5, 0x0, 0x16, 0x60, 0x3f, 0x12, 0x24, 0x3, 0x5f, 0x48, 0x6c, 0x60, 0x9, 0xb, 0x4, 0x18, 0x2, 0x3, 0x12]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x72, 0x57bd1244417afd1f, 0x24, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x74b, 0x8001, 0x3, 0x0, 0x6, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x7}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x7}, {0x1, 0x2}, {0x0, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x1}, {0x0, 0x8}, {}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x5}, {0x5, 0x6}, {0x5, 0x8}, {0x5, 0x6}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x5}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x0, 0x8}, {0x4}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0xa}, {0x3, 0x3}, {0x5}, {0x4, 0x7}, {0x5, 0x8}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x1d}, {0x5, 0x3}, {0x3}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x5}, {0x3}, {0x2, 0x7}, {0x4}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0x4}, {0x2}, {0x7, 0x3}, {0x4, 0xa}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x6}, {0x3, 0x9}, {0x6, 0x9}, {0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x9}, {0x6, 0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x2}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x1e}, {0x4, 0xa}, {0x4, 0x6}, {0x2, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x3, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x7, 0x6}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x4, 0x7}, {0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0xa}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x5, 0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x24, 0x48]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x1}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x4}, {0x3, 0x7}, {0x3, 0x7}, {0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x3, 0xa}, {0x2, 0x5}, {0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x2}, {0x1}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x4}, {}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0x2}, {0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x4, 0x9}]}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x6, 0x30, 0x12, 0x36, 0x24, 0x5, 0x60, 0x9, 0x1e225a81c4eeced, 0x9, 0x18, 0x1, 0x16, 0x36, 0x4]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x8}, {0x2, 0x9}, {0x7, 0x6}, {0x4, 0x6}, {0x4, 0x9}, {0x3, 0x4}, {0x2, 0x7}, {0x6, 0x6}, {0x5, 0x4}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0xb, 0x6c, 0x6c, 0x3, 0x60, 0x9, 0x12, 0x2, 0x19, 0x1, 0x9, 0x24, 0x12, 0x4, 0x4, 0x1, 0x18, 0x18, 0xc, 0x9, 0x2, 0x1b, 0xb]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x5}, {0x4, 0x1}, {0x4, 0x9}, {0x4, 0x1}, {0x4, 0x6}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x3}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x6, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x4}, {}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x3}, {0x2}, {0x0, 0x6}, {0x7}, {0x7, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x7}, {0x4, 0x8}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x5}, {0x3, 0x7}, {0x3, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xd1b, 0x0, 0x3f, 0x4, 0x1, 0x6e, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x4}, {0x2, 0x4}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {0x4, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x2}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x7}, {0x7, 0x9}, {0x5, 0xa}, {0x6, 0x8}, {0x6}, {0x2, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x5, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x9, 0x4d, 0x18, 0x0, 0x5, 0x16, 0x6, 0x60, 0x1, 0x16, 0x5, 0x1, 0x3, 0x4]}]}, @NL80211_BAND_2GHZ={0x110, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x1}, {0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x5, 0x3}, {0x3, 0xa}, {0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x5}, {0x3, 0x9}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x1, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x7}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x8}, {0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x1}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x9}, {0x7, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x19}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x6, 0xa}, {0x7}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x6, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x2}, {0x6, 0x3}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0xa}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x6, 0x0, 0x100, 0xee, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0x7f, 0x1, 0x5, 0x3f95, 0x81, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0xc, 0x4, 0x6, 0x3]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x8}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x2}, {0x1, 0x1}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x4, 0x5}, {0x4, 0x4}, {0x6, 0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0xa}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x7}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x1b, 0x18, 0x24, 0x1b, 0x6, 0x6, 0x5, 0x16, 0x1, 0x12, 0x60, 0x24, 0x36, 0x5, 0x8, 0x12, 0x4, 0x5, 0x4, 0x3, 0x0, 0xc, 0x74cb62c44ad78e7a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x11f, 0x401, 0x0, 0x54a4, 0x8, 0x101]}}]}]}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x20004019}, 0x20004010) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000080)={0x1, &(0x7f0000000000)="fa107b705116704646b5e86d1ee69c90315cd01c03ce4924fda7490e69a14e73be49e808176e9271cfa2d8b39039553268201a0aea6ec0619434c01d7249e96a82b449b1632baeade7bdefa9de981d92f2228b5330707c86fbf8c139b1eaa3c8ef119189d459cd577e8baabec52bf08a8e2f"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x110, r0, 0x0) 21:43:31 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newtclass={0x2c, 0x28, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0xfff3, 0x6}, {0x2, 0x8}}, [@tclass_kind_options=@c_sfb={0x8, 0x1, 'sfb\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48491) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f00000001c0)) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000180)={0x200, &(0x7f0000000080)="4f59ac11208554532092e91ab400d35dbf99290e7509328c47881874ab996f00406b9cf3d9148c3a868ba3b32ed419ee93b4f29b52cb437371dbfd8f6fe5cb4866764d5cc2cc324e484fc561c32de04387da4545acff0e3ff28a76c9fde183b425dd1c29126055e4549d8386407ea67e6417ac9a46bffbad0c846b87440bb11e729b887120cdedc27c42dc7f43ddea8da28512494df09a1edcfee4267b97cdf3444f6463e02ee5a7afcb527aeba2e20c8adbfdbeedccd8cb9a98d07fe318ef80cc766d57861b615243c14bb18779b331f40e2f73e49848a577581d4648"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0xa}) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000d, 0x1010, r0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x0, 0x1}) 21:43:31 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x100, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x3}, 0x0, 0x0, &(0x7f0000000180)={0x5, 0x6, 0x2a, 0x4}, &(0x7f00000001c0)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x9}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88d, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x2, 0x3, 0x2, 0x3, 0x4, 0x100, 0xfffffffffffffff0}, @ldst={0x3, 0x2, 0x1, 0x6, 0x7, 0x0, 0xfffffffffffffff0}, @map={0x18, 0x7, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @generic={0x84, 0x0, 0x7, 0x0, 0x6}, @generic={0xff, 0xf, 0x2, 0x7, 0x50}, @alu={0x4, 0x1, 0x5, 0xc, 0x6, 0xffffffffffffffe0, 0xfffffffffffffffc}, @btf_id={0x18, 0x8b9fb18a35584b3, 0x3, 0x0, 0x1}, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0x8fe, 0xdf, &(0x7f0000000440)=""/223, 0x4818c45e33e03ff9, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x5, 0x8, 0x8}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x1, 0x1, 0x2, 0x8, 0x4, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x1c, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x1}, 0x10, r1, r2}, 0x78) 21:43:31 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvme-fabrics\x00', 0x6980, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000001140)={0x6, [0xe80, 0x1000], 0x6}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) recvfrom(r1, &(0x7f0000000040)=""/44, 0x2c, 0x20, &(0x7f0000000100)=@sco={0x1f, @none}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x10043, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x108, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xd}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8008) accept4(r3, &(0x7f0000000440)=@pppol2tpv3, &(0x7f00000001c0)=0x80, 0x80800) 21:43:31 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000000)={@hyper, 0x2}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:31 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x40000000fffffa, 0x571003) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x0, 0x400000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/74, 0x4a}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000100)=""/198, 0xc6}, {&(0x7f0000000500)=""/33, 0x21}], 0x100000d0}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001000)={0xfffffffffffffd8f, r4, 0x100, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x0, 0x2a, [@link_id={0x65, 0x0, {@random="de4af8108e5b", @broadcast, @broadcast}}, @mesh_id, @ibss={0x6, 0x0, 0x326f}, @perr={0x84, 0x0, {0x3, 0x0, [@not_ext={{}, @device_a, 0x2e1, "", 0xb}, @ext={{}, @device_a, 0x8, @device_b, 0x24}, @not_ext={{}, @broadcast, 0x10000, "", 0x32}, @ext={{}, @device_b, 0x2, @device_a, 0x2c}, @ext={{}, @device_b, 0x4, @broadcast, 0x33}, @ext={{}, @device_a, 0x6f7, @device_b, 0x17}, @not_ext={{}, @broadcast, 0x4a7f47c, "", 0x6}, @ext={{}, @device_a, 0x6e1c, @device_b, 0x11}, @not_ext={{}, @device_b, 0x8000}, @ext={{}, @device_b, 0x800, @broadcast, 0x28}, @ext={{}, @device_b, 0x20, @broadcast, 0x5}, @ext={{}, @broadcast, 0x3, @broadcast, 0x2f}, @not_ext={{}, @device_a, 0xfffffe01, "", 0x4}, @not_ext={{}, @device_b, 0x7, "", 0x1d}, @not_ext={{}, @device_a, 0x7fff, "", 0x41}, @ext={{}, @broadcast, 0x6, @device_a, 0x2b}, @not_ext={{}, @device_a, 0x4, "", 0x3c}]}}, @perr={0x84, 0x0, {0x28, 0x0, [@ext={{}, @broadcast, 0x0, @device_b, 0x3d}, @ext={{}, @device_a, 0x1, @broadcast, 0x18}, @not_ext={{}, @device_b, 0x7, "", 0x1}]}}, @peer_mgmt={0x75, 0x0, {0x0, 0xf074, @void, @void, @void}}, @mesh_id]}, @NL80211_ATTR_MAC={0x0, 0x6, @device_b}]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40081) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000bc0)={0x1dc, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x159, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x1, 0x7, 0x0, {0x3, 0x8, 0x0, 0xc7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0xbbd2, 0x1f}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @measure_req={0x26, 0xd3, {0x97, 0x0, 0x6, "b408480ee35db99224dea0c34861df1898c4128e23bb8ce08ff0de40891958d72f90c7314a583c0bfdc5a30c44fa9ec6bca8f466a32cefdfc493342a87df722cbce24b2c6216f5eb4e8963a62600f931e88fb4eb5e9bd442fa9494f49592de39ca6cb68b76a47cba05b8be4055b2d5f6a9dc73bba0c7ea3a66311a51948c13529d24fe53f52b6b0a21d4c2f71f54dc8bdb27e0b3671b035efe9704b3e75ae45d68252100d385642db26bb07ac42febd4f392a96a8529f628f3feb8290c4cc26cdd9b6da72c5a5b3474ab07b4f52c05b0"}}, @mesh_config={0x71, 0x7, {0x5e, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x60}}, @gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6, {0x51, 0x3, 0x252, 0xaa99}}, @preq={0x82, 0x46, @not_ext={{0x0, 0x1, 0x1}, 0x0, 0x4, 0x4, @device_a, 0x8, "", 0x40, 0x10000, 0x4, [{{}, @device_b, 0x101}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffffe}, {{0x0, 0x0, 0x1}, @device_a, 0x697}, {{0x0, 0x0, 0x1}, @device_a, 0x3000000}]}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x10e}, @NL80211_ATTR_IE={0x44, 0x2a, [@chsw_timing={0x68, 0x4, {0x48, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x80, 0x4}}, @measure_req={0x26, 0x32, {0x88, 0x8, 0x1, "daf351a7af5c6b3f15ee4b0e08522b2d0e23f7841b1697fcae3187e3ce45c16a1c210eb87e5637461d596cf9f74c5c"}}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@dsss={0x3, 0x1, 0xaf}, @challenge={0x10, 0x1, 0x1e}, @cf={0x4, 0x6, {0xc1, 0xfd, 0x1, 0x5}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40080}, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@multicast2, @empty, 0x0}, &(0x7f00000004c0)=0xc) r6 = socket(0x0, 0x6, 0xd2) accept4$vsock_stream(r6, &(0x7f0000000dc0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002e0000022cbd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="10000502000000fff1ff028008050b0003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x40) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/nvme-fabrics\x00', 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@setneightbl={0x28, 0x43, 0x400, 0x70bd28, 0x25dfdbfe, {0xa}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8, 0x9, 0x2}]}, @NDTA_NAME={0x6, 0x1, '!\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x200000c1) recvmsg$can_bcm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/159, 0x9f}, {&(0x7f0000000800)=""/181, 0xb5}], 0x5, &(0x7f0000000940)=""/52, 0x34}, 0x2020) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:31 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000100)={0xe, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@any, 0xf0c}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000000000000000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000000c0)=0x7, 0x8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000180)={0x8a7e, 0x10, [{0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x0, 0x1}, {0x6, 0x1}, {0xb, 0x1}, {0xe}, {0xf, 0x1}, {0xd, 0x1}, {0x4, 0x1}, {0x8, 0x1}, {0x5}, {0x7, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0x1, 0x1}]}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) 21:43:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000100)=0x80) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x1f1402) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x27, 0x4, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="bc51d99c604e3cfd99b2a2730eff22ea8cc7c095eec0394971dd3c3d005cd53f21a753c58e047eace38ef6f58c16a955224fc5500f70dd24bbaa706096e54e8472f8cc7d5a78a50f08ee633da486242fa344645908d5a508186e934e435b1136ead48a1451a1ea2198c5dfee872a572a7d09de73221997b78fda5149ca86bee12c94bbb64e720bf081ea047db6e669a38f802f81c21c5fe71564f723ee3381f4c3d5b6915fdb994f12d01ba4", 0xac) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@alg, &(0x7f0000000100)=0x80) 21:43:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x7c, 0x1, 0x40, 0x14, @mcast1, @local, 0x7800, 0x1, 0x401, 0xffffffff}}) 21:43:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)="1d026fc43600db43c20bfe8dee01c78fea5e63b03eab5c8cc41cb9554f18763914cfe757ed029fb6cd7bf1a4520e69778d56957ede70ddd406c0caedc5312585b803c7dd1492d4d58d408c5af2fc9dcc934bbb7e73251237c7", 0x59}, {&(0x7f0000000100)="4e9e", 0x2}, {&(0x7f0000000240)="789695209abc571cb4997cd34e2dca80c1c1463e73b50d0c7fae8a671fc0c4534b6e58c35b2e6de3511412c795fc14ef0a", 0x31}], 0x3}, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "e5197159828a5181d6854963e402a94cc1f37a926410f9360d1112a3e490d32d8c2fb789e82ec25048dc6d7fbc475d86b9b4dca8f942d704f95c9efc9e7fe1c2", 0x36}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffff9, r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r3, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80) socket$inet6(0xa, 0x8000b, 0x9) 21:43:31 executing program 5: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7, 0x460900) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x90400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r3 = accept4(r1, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x4, 0x3, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x10000000}}}, 0x3a) connect(r0, &(0x7f0000000080)=@ax25={{0x3, @bcast, 0x3}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 21:43:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 21:43:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0xffffffb5, &(0x7f0000000000)="375dcdef0a8f1ad2e7f1a5819dfa0c3f5481ba0120e05ee0e32bc42d64ddb4ae"}) 21:43:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xc0000, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x207521ccdb3bea83, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x20000800) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/111, &(0x7f0000000100)=0x6f) 21:43:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f00000001c0)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x42c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3b9, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2843}, @broadcast, @device_b, @device_a, {0x3, 0x40}, @device_b}, @random="6647c9b909aea116a57b5d5815b559ad7545fe96c52c8481aca6efa71f23d90257054b9c463d4fed9d9469426a707060df2cf6418e19e3948b7839e91b7d46416ba171a449c33dc85e5e357408297596e91907dab17ddf9328e3ec204895bbecef4ca7ba7ba583254c77a95dbd6fb607b0e9f0c25402578b4cf504f22907b960233dad306afe29564f9d58a8be004b54a95e59930d4eee7b81ad581f407366ae1363859a48c92a6b2b975dd0ac9bfc0abc95317cec85a88ca49a855896184694e574bda353d0691bad55a2e95342e45993e14530b44583ab962c69b3e8bd4579bf67af4e52dc444edc326f1946b89a2da1fa1f1254b81fc52b0c6c55a7a13200620cc43637185bcb1b1038894905d71ec9c07b45ce26f89699b41dcbd6b40b15c331046c687ad696654e6933429262ab596c68d7d4d069c8a9d2a78d2d719cd7614cfb690e343c1634288fea136ef6c26b902972309e6a8e35b5a3bc2d568ed54093c4e1815d1bdee3eae49b9f6986bcef2ed57520c9b419ee53d3f071035a7484fe39337097905197a1bed19c531fbe0349614e04db08df43204e69abcf583063131a6fd19ba74af12b437686cec66ab1a00e72253e270e73af343e8ce96549f6e7c12f605fb9cb72bd4820ed82d7cebcf5a1aa8160726d0c7156acc71428bd11eca35e98bf56584572c2fa914162b3cae51fb7ffd029012a3622013e856517ee59daaa2070297fec57dfbac69eb68fd2ed19760a0e44c5db765777f5c255c88e60e119092027bbfaa600042e4ffd7c7e0a76d3a7dd99bf78612a991081bb22030c52b08cc3583294baef28a99149e3345dc90a3d5dfdbd4e681649a2c4855c09354a3320d1b4100a920eb8728703041a3f2a890d05dec784d29103bf786cdec13aca1bb36fb652ae58963e60e26339a07a3fc74d532c1ccad18ad94fe3958b6075edab1242a3663e799557932166424a6aeeccecb12fd02dde4c8c0b42bab6b6595a8918a96473861c0cf2ad43f01532e6a91532b7ea05c176b07227a7e2fa0b6a250ba8abb7c10b651914ac1269d11b6a80b0ac863ad7059d91036df8f07616507f67812a3c55998707ce9d3a9021ad1fd5c730c8fdce1972b075d20c339b0490906d477429f21b7d60abbada1ce9a9d390965f8dcbbee76459e8c273c9bce32d59c8b0eb2c75f1e77b7051abae5d1d221ea769ab88833e011097c9db91abf0f8940022982918ce87f1604f7ae34e1d857b195a18684ec4275ee46c7d9cc7351fac9304e49b4415ee06d4952224c54a29129fec1c37"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x0, 0x3}}, 0x33, @val={0x8c, 0x10, {0xc9a, "4766e6436cb8", @short="fbe25acec5e40543"}}}}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) connect(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @multicast, 'wg2\x00'}}, 0x80) getsockname(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80) 21:43:32 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd2c, 0x65dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000002, 0x74}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x8040) ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0xffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101000) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x9, 0x406040) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x213, r1, 0x71) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) r2 = socket(0x0, 0x3, 0x7ff) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x10000004}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000802) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000008ec79cc28187a28ead82ba78afcc3da9ef8684c6d67e90dbded54dde6ef92bec1439ac0cda8f61cf3d5a82379f1cca5abb53849d69056104d6effb6acbdc8e3389a651e19d54db5d9880ac1162f64571b14ee462dd31d50e906bc9fe01e176bbfa6ce88c4c0dc993", @ANYRES16=r3, @ANYBLOB="000225bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000580)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) 21:43:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000180)={&(0x7f0000000b40)={0x6d0, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xebb, 0xc2f, 0x80, 0x3f, 0x1ff, 0x0, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x5, 0x9, 0xb, 0x1b, 0x3, 0x3c, 0x16, 0x2, 0x5, 0x18, 0x36, 0x6c, 0x1, 0x0, 0x1, 0xc, 0x9, 0x3, 0x1b, 0x2, 0x60, 0x0, 0x6c, 0x12, 0x2, 0x60]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x1, 0x4, 0x4, 0x36, 0x1, 0x18, 0x30, 0x2, 0x1, 0x5, 0x4, 0x16, 0x5, 0x30, 0x1, 0x6, 0xc, 0x36, 0x3, 0xb, 0x5, 0x4, 0x5, 0x4, 0x2, 0x60, 0x36, 0x24, 0x3, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x9}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x4}, {0x3}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {}, {0x7, 0x2}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x1}, {}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x7}, {0x3, 0x6}, {0x4, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x401, 0x2, 0x1, 0xe6fa, 0x8001, 0x4811]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecc6, 0x2, 0x0, 0x100, 0x8000, 0x7, 0x1, 0x3]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x80, 0x5, 0x3, 0x0, 0x9, 0x20, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x33, 0x2, 0x24]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x60, 0x18, 0x9, 0x1b, 0x5, 0x18, 0x1, 0x1b, 0xb, 0xc, 0x4, 0xb, 0x3, 0x48, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x1, 0x7f, 0x0, 0x9, 0x3f, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xabd, 0x9, 0x2, 0x4, 0x5986, 0x4, 0x2, 0x40]}}]}]}, @NL80211_ATTR_TX_RATES={0x284, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x1, 0x3, 0x7, 0x8, 0x80e, 0x1f, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0xc, 0x18, 0x16, 0x48, 0x4, 0x1b, 0x3, 0x9, 0x16, 0x60, 0xb, 0x16, 0x12, 0x30, 0x6c, 0x1b, 0x16, 0x9, 0x4, 0x24, 0x12, 0x36, 0x2, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0x9, 0x5d7, 0x20, 0x9, 0x1f, 0x5, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x18, 0xb, 0x2, 0x5, 0x18, 0x2, 0x36, 0x2, 0x56, 0x9, 0x6, 0x1, 0x0, 0x1b, 0x0, 0x1b, 0x36, 0x30, 0x36, 0x24, 0x6, 0x18, 0x16, 0x9, 0x30, 0x18, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x7}, {0x6, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x6, 0xffff, 0x800, 0x7, 0x9, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x6, 0x8}, {0x2}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x4}, {0x6, 0x3}, {0x6, 0x1}, {0x1, 0x2}, {0x1}, {0x4, 0x2}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0x7}, {0x1}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x9}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x7, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x6}, {0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x7}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x7, 0xa}, {0x1}, {0x4, 0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x3}, {0x1, 0x2}, {0x5, 0x5}, {}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x2, 0x8}, {0x5, 0x8}, {0x3}, {0x1, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x3}, {0x5, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x5, 0x3}, {0x5, 0x4}, {0x5, 0x2}, {0x4}, {0x2, 0x4}, {0x4, 0x2}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {}, {0x6, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x8000, 0x9, 0x200, 0x0, 0x7, 0x48e]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x6}, {0x3, 0x1}, {0x5, 0x5}, {0x4, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x6}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x18, 0x5, 0xc, 0x30, 0x4d, 0x30, 0x6c, 0xb, 0x5, 0x1, 0x5, 0x12, 0x3, 0x36, 0x5, 0x48, 0x9, 0xc, 0x2f, 0x5, 0x5, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x60, 0x17, 0x5, 0x1b, 0x40, 0x36, 0x18, 0xc, 0x30, 0x1, 0x1b, 0x3, 0x60, 0x48, 0x16, 0x12, 0x8, 0x5, 0x0, 0x30, 0x6c]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x9c8, 0x4, 0x8, 0x1000, 0x5, 0xfd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x0, 0xf3d, 0x1, 0x4, 0x100, 0xe]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x6}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x3, 0xa}, {0x6}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x5}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x5}, {0x5, 0x6}, {0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0xa}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {}, {0x0, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x9}, {0x2}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x7}, {0x5, 0x2}, {0x1, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaf7, 0x8, 0x3, 0x0, 0x1, 0xfffc, 0x8, 0x200]}}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x7, 0x9}, {0x5}, {0x7, 0x1}, {0x3, 0x7}, {0x7}, {0x7, 0xa}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x1}, {0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0xa}, {0x2, 0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x7}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xb618, 0x4, 0x4, 0x0, 0x7fff, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x4, 0x81, 0x6, 0x0, 0x9, 0x305]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x3ff, 0x2, 0xe6, 0xf22, 0x4, 0x1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0xfc, 0x554a, 0x4, 0x200]}}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x2, 0x10}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x1}, {0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x4}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x5}, {0x0, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x3, 0xeb1, 0x7, 0x3, 0x7, 0x9, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8bdd, 0x9, 0x5, 0x66, 0x9, 0x200, 0xb54, 0x8]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x1, 0x5}, {0x5, 0x8}, {0x5, 0x3}, {0x2, 0xa}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0xb1, 0x8, 0x3, 0xca4, 0x1000, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x4, 0x12, 0x16, 0x6c, 0x60, 0x32, 0x4, 0x3b, 0xb, 0x6c, 0x30, 0x5, 0x47, 0x24, 0x24, 0x9, 0x16, 0x30, 0x16, 0x4f, 0x6c, 0x9, 0x4, 0x12, 0x36, 0x16, 0x3]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x7, 0x8}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x5, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x7}, {0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x3}, {0x5, 0x3}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x1}, {0x4, 0x9}, {0x1}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x2, 0x9}, {0x7, 0xa}, {}, {0x4, 0x4}, {}, {0x3, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x3, 0x9, 0xba8b, 0x8001, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3f, 0xff61, 0x40, 0x9, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x3}, {0x1, 0x4}, {}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x6, 0x4}, {0x4, 0x6}, {0x3, 0x7}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x4, 0x7b, 0x3, 0x1b, 0x6c, 0x6c, 0x9, 0x60, 0x12, 0x16, 0x6, 0x18, 0x1, 0x1, 0x5, 0x18, 0x10, 0x16, 0x4, 0x6, 0x6c]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x6}, {0x6, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x1}, {0x2, 0x5}, {0x6, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x4}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0x8}, {0x6, 0x5}, {0x4}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0x4}, {0x4}, {0x2, 0x3}, {0x3, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0x20, 0x4, 0x4, 0x1, 0x7, 0x6]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x1ff, 0xff81, 0xffff, 0x1000, 0x101, 0x7ff]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0xa}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0x3}, {0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0xa}, {0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x6}, {0x3, 0xa}, {0x2, 0x8}, {0x2}, {0x5, 0x3}, {0x6}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0x6}, {0x7}, {0x5, 0x8}, {0x2, 0x13}, {0x1, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x4}]}]}]}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x4080}, 0x1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x7d8, r1, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x7ff8}, @broadcast, @broadcast, @compressed={{0x0, 0x0, 0x1, 0x0, 0x3}, {0x1}, "10bf9dfbff066e4f"}}}, @NL80211_ATTR_FRAME={0x2e, 0x33, @ctrl_frame=@bar={{}, {0x81}, @device_a, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x9, {0x3, 0x3}, "34c9c047ee76abf8"}, {0x0, 0x6, {0x8, 0x6}, "634e5583f4ce856f"}]}}}, @NL80211_ATTR_FRAME={0x735, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xc6c}, @random="def5e37741b3", @broadcast, @device_b, {0x2, 0x4}}, {0x9, 0x1, 0x2, 0x0, 0x7}}, {@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @random="7accb74be457", @broadcast, @random="d22170c4cbb6", {0x6, 0xdd5}}, {0x5, 0x1, 0x0, 0x1, 0x27}}}, @ver_80211n={0x0, 0xff, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7d8}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000000) 21:43:32 executing program 1: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x28) socket$nl_route(0x10, 0x3, 0x0) [ 2849.581452] IPVS: length: 111 != 8 21:43:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x30, r1, 0x9c8) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x10, r0, 0x7) 21:43:32 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x210202, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000100)={0xc000000, 0xfff}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000080)={0x7fffffff, &(0x7f0000000000)="f1614429cfcdda1bf2c42fb267450540eed7250db2c1f780a1b65cba71dc390e276668fcefa03f6b4feab7318e57c87b864369d25ffbe990bc5b397455390d9cf7dd052a141750b008b86ae6db23b104da3ef687b3f411074982fa96a9606364965e0dd80e2e8ac6ee21594b6f87f1"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80000) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000200)={0x1f, 0x31, 0x8, 0x514, 0x6d, 0x8, &(0x7f0000000180)="98703e0c7372c60c88c0725b5c7a361c174aa33ce0a6cbf20a025290edf3813d52a8958723e92dfa38edb29e5a0bcfc33558f594588845c9f06304e80f82a16ea760a9f2c569e7d078a3f6e34d2fa396120472498f1d37f5663a2f984d42df9f99af25997a80cff36b52601764"}) 21:43:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f4, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c4, 0x2a, [@ssid={0x0, 0x16, @random="873d102bbbffc959c125821334fc314db136589afd65"}, @supported_rates={0x1, 0x6, [{0x12}, {0x24}, {0x1, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x6c}]}, @measure_req={0x26, 0x9d, {0x0, 0x9, 0x9, "1384fa146eef6c0c0a4b48f0bfc0155880fe32faebfe7ccfd96618944f5f609ef82752439853914f769d4a92e17575d73a298d2501f46eef863371f7b388dbc01f390756264d1e717624901b3bda8de67b8aa90450366ccced82e883cff483dbea918d9164db219dc3e8df5491b5cd3a768f3cea10de1fe704c2609ba1cc1d00fbb45f784a7e5a0457fe4e51fcb62c94c0e44e9dc19c28c0c7a7"}}, @challenge={0x10, 0x1, 0x76}, @measure_req={0x26, 0xb8, {0x0, 0x4, 0x19, "70cb8c3730e529718fd11ad8eef32b4cef9b88871fc9bc98979f37ac5dc45f3cc93e8a1395c56144da2edccb516e197d148d3ae65a9eed2c2dda4c525994cccce028fa1f3a12ea89d020867a7eb139f940dcabda500adfe86dbd360ec2531678b93b838e8039f8df3ff6b794bca74aea52356d43badc037f6acc3f262ffc1433c5f6fd61b0293eadd90423344ed091d56999b83797e7f6b0ce7eecea955cefa5652826e61116475c3ca078015e1f927071758fd4fe"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x5, @device_b, 0x20, "", 0x8, 0x9a54, @broadcast, 0x2}}, @measure_req={0x26, 0x1e, {0x80, 0x81, 0x0, "c06cb4756b58ff1b28c8f21592e72d4e6113ebbce122a44d98295d"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5cb90a16eb6e"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf256000000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x208}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x61, 0x3, 0x20, @local, @dev={0xfe, 0x80, [], 0x38}, 0x40, 0x0, 0x6, 0x9}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private2, @private0, @empty, 0x9, 0x80, 0xa0b7, 0x0, 0x3, 0x20, r4}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)={r5, r6/1000+10000}) 21:43:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00'}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r1 = socket(0x2, 0x1, 0x101) sendmsg$nl_crypto(r1, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)=@get={0xe8, 0x13, 0x300, 0x70bd2a, 0x25dfdbfe, {{'sha512-arm64\x00'}, [], [], 0xc00, 0x2000}, [{0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc018109867f1a06f}, 0x8090) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000000780)={0x1340, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x201, 0x2a, [@cf={0x4, 0x6, {0x4, 0xe9, 0x3, 0x8}}, @perr={0x84, 0xf5, {0x2, 0xf, [@ext={{}, @device_b, 0x800, @device_b, 0x3d}, @ext={{}, @device_a, 0x1, @device_a, 0x2f}, @ext={{}, @device_b, 0x63b, @device_b, 0x2c}, @not_ext={{}, @broadcast, 0x296c, "", 0x36}, @not_ext={{}, @broadcast, 0x1, "", 0x29}, @ext={{}, @device_b, 0x9, @device_a, 0x33}, @ext={{}, @device_b, 0x81, @device_a, 0x1c}, @not_ext={{}, @broadcast, 0x5, "", 0x16}, @ext={{}, @broadcast, 0x0, @device_a, 0x39}, @not_ext={{}, @device_a, 0x1, "", 0x1d}, @ext={{}, @device_b, 0xffff, @broadcast, 0x3}, @not_ext={{}, @device_a, 0x5c, "", 0x30}, @not_ext={{}, @device_b, 0x7fff, "", 0x37}, @not_ext={{}, @device_b, 0x9, "", 0x7}, @ext={{}, @device_b, 0x5, @broadcast, 0x1f}]}}, @perr={0x84, 0xfc, {0x0, 0x10, [@ext={{}, @device_a, 0x6, @broadcast}, @not_ext={{}, @broadcast, 0x3, "", 0x4}, @not_ext={{}, @broadcast, 0x8001, "", 0x1f}, @ext={{}, @broadcast, 0xc942, @device_b, 0x27}, @ext={{}, @broadcast, 0x3, @device_a, 0x2f}, @not_ext={{}, @device_b, 0x1000, "", 0x1d}, @not_ext={{}, @device_b, 0x4, "", 0x37}, @ext={{}, @device_a, 0x1, @broadcast, 0x2}, @ext={{}, @device_b, 0x7, @broadcast}, @not_ext={{}, @device_b, 0x7, "", 0x3d}, @not_ext={{}, @device_a, 0xdd, "", 0x3f}, @not_ext={{}, @device_a, 0x80000000, "", 0x16}, @not_ext={{}, @device_b, 0xffff2366, "", 0x17}, @not_ext={{}, @broadcast, 0x80000001, "", 0x1}, @ext={{}, @broadcast, 0x100, @broadcast, 0x2}, @ext={{}, @device_a, 0x3, @device_b, 0x17}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xcf}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xf3, 0xfc, "92e6c24a8f75da5d4f04fb4cf75c778de24bd8f15759ed2d36dcc317bece902d04989e5c572810a9232287fe6d8438d0756c26e1d41f8dfd2dac366d37a2a193ccfba51c2f0fd4435ce29ecb7e86214fe7b3e6a6e74cc73cf9b9266de5978c66fdcb61e460568a236030e8def7ebd373e4fca7e9cbbed549f767c6aeb510c6cbbb5ed37db90ed1ba72a103bfb39cb280fedbdf89248aecd29523e425702d6ca65798dd396247f49e95ee0bfa3383ae290f86b40936d7e74fa9c0fa4bf9193fc920812b1b17e8b3c2990bf20f9a8985d089faae08380dbf37cf06a0aa710c56c99912590e25bf6b448b4ec66e5bc84d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "7e48bdd20311190a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2d86}, @NL80211_ATTR_FILS_ERP_RRK={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}]]}, 0x1340}}, 0x48001) socketpair(0x6, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/154, 0x9a}], 0x6, &(0x7f0000000040)=""/38, 0x26}, 0x0) [ 2849.680920] IPVS: length: 111 != 8 21:43:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x80) 21:43:32 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r1, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0xffff) 21:43:32 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x80) 21:43:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80000, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x8840, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x2, 0x10, 0xfff, 0x3, 0xc4, 0xdc, &(0x7f0000000140)="60ee34d7b94c228f6475947b940a97adbdc9b443c87f39abba47d30b3e8eda3f64996c8e00d5f14b9d7c0b8d2ac340d2c15e22219669243e35e25fe02e8e00b3f0e8f52999ea3cddad8fda63c4126386c922f43d03f20ed1ef2dc488369b3f5d85c4de510ea1e7f9bdd9168cbc068329ab012208b370ee53d2de639e0d5112e65c0f8a0702388562a19312fac5c752ec93ef2df1b9bbe21ad88c361fb1f4fe1b005ee02ba44758b4480ecdd03eac9c9d865204792311483bc9b0bb67b2de4eb1bb505e91"}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x2}, 0x10) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f00000002c0)={0x5, &(0x7f0000000280)="935da64c7d104b10a9b22f583383dbf3187ab265894e566f"}) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x13001, 0x48819}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) 21:43:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x44, 0x16, 0x4, 0xff, 0x80, 0x2, &(0x7f0000000000)="9f2938c2d63faf59ee5f25135e1e9f3a6ea85bfda0f1811bf6cbc8921acde14925db1eadef818cf0eb9802aa0a34f3afb3318c59cd252932b13e582385831126a25c30744cecf78a8dc2a962b4f76581f1a2587c51cf5bd6f179c8d8b0d70365d7d48dc95adb9525b11e11d8f1f63be20f18b987eff1c15b451bdd6d195a27a1"}) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140)) 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80000) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4010, r1, 0x3) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x2, 0x80, &(0x7f00000000c0)="31ed003d70d566e2095a8ac95ae06035d5d5b546a8094f8bb33866c73e28e84fcba42824e058abf13a9470bf110052399385b6eac543638c09e88f05bffb54b49668bfb91044d3cf5df6e6e3aaa509bf5e078186027d031b5d3c28951a1f05d35f8bca63ee6acc7b12d92e06f84f7e770b09ced26a2de5106ae3"}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000000)={&(0x7f0000000340)={{@local, 0x1}, {@host, 0xb81}, 0x400, "5eff341c7e6d3d635e02e1a01f1c0bfb915e1718c2052810ca8e4c637a0d2b5953328b6e69cf7fc7f11d96051bbbc63e240b0567b1b89cf12aadc2d022ea1106638e7dfca48d1e342a5705391557a378a90a7c1514cbeb025101e8f7de4c9296e692486f1c192466c7a7a52fb0539983514e7f5ea91c57ded6cc90450e91ead42dba43e771b77cfd1d0073bad5b053ba754ebb0b93f705b5e9f264fddda3a359b609f4b0f39367d492f510914a6b7dff49621b59a33a8313919c875c1dd65784b9763dd2a7119e5ff9c206b1e60a8afdcc4ae74293d66ffe1f54caba518d8172e7da005ffc25d9a0cce08702d41e46474ebbfcfe71ed376a25fb7287cfd4bbe12fe4c87ecc77c05c15c60bf1949e67e8105a7753f477e72e56bb6734b5a19c174e3406b02b9285347a12e7f9fcefb0e81d27942dc5da21081c1c44957c3130bfe938038a4e09a3fdbe061a18b412d4a6da24cb7566d82e0dd2a504288b7b44a9c15a716da393f08fdf9627c3b6cce368b077821e66a0fdd52187def761d87f632df1815b3b0b49ba81362d4a8641ba7654d6e3a3b73c2fbf33ebb1174bf78119db74dab6dda4c2683e6c00c5b2452d770a2abc447d9d42357d07a1aee8224c3fbe99d1a7241b1ebd35af5d272b4592fadea9e12ee4cbbf48744eb2aa0f103a41c3f4857ac50511bad5614e0d965b8251f9543bcdfe1bffbe6615b5957d49bdca68baf54a5abb893293b137148b1dbbaf27738c7e5261620b1b5a2adfc61c641629b9481e6321dc39e75431637eccce79f24af8ac0523e2fb3dabb311e335459f52723c351bc71896d70977d9d2f2fd8d459c5a05f6966bc5a356ccaa23ca9d32a60e404ae3a43b8d10b44624459777d508d8733372cba3bb1e2cfaa2d1e125379b3ce6eceee668eff2b88df9b22716a46f33583213d8fd74674306503498481d05d2d38730d67159173824c76eef6f2a235789ef82c8a714692764de1145dc1309529ad85ea10409dc2236510181a59e8e3df77bc37bfaf48ac6f46cb91619bfb4229152e660c9dd48e709875a62cbaf8f7e001971cabafbac395e2cb03ab5385bed042f6166ef92b376a60000fa48072d84149984dece1acf1b0e55ebe3a275266445348ff0c15bcd220b11e95119306010fbdbf5d31ffb8db10e83f1ff3fb554f3aaf5d1dec4aedbc5ad872f2a7d935a4f70ad2353323d914a9046ad8dd32d720d1a267db7f2818bae4761488ab2ae8c1d6234c1cbd2914878e8fbc6e2afc6090e899fc6f8ff1ecd0625f69181c9435e3069abc70fee840b364d0a2ae2e600dd73bda73bb7d5bc7a825cbb62083e2242d0483a5f5fe343ff1b61b042b399318595c42c82725887aa91eb1aabf5ae8c8b8c7101795b762691ba19982a81e5d2900f9933860d367c2ab7107bae738c6e9698c5498f1520fcc8fafe547fdc7ba6"}, 0x418, 0xffffffff}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="d27000000501000004000a000a"]) 21:43:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f4, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c4, 0x2a, [@ssid={0x0, 0x16, @random="873d102bbbffc959c125821334fc314db136589afd65"}, @supported_rates={0x1, 0x6, [{0x12}, {0x24}, {0x1, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x6c}]}, @measure_req={0x26, 0x9d, {0x0, 0x9, 0x9, "1384fa146eef6c0c0a4b48f0bfc0155880fe32faebfe7ccfd96618944f5f609ef82752439853914f769d4a92e17575d73a298d2501f46eef863371f7b388dbc01f390756264d1e717624901b3bda8de67b8aa90450366ccced82e883cff483dbea918d9164db219dc3e8df5491b5cd3a768f3cea10de1fe704c2609ba1cc1d00fbb45f784a7e5a0457fe4e51fcb62c94c0e44e9dc19c28c0c7a7"}}, @challenge={0x10, 0x1, 0x76}, @measure_req={0x26, 0xb8, {0x0, 0x4, 0x19, "70cb8c3730e529718fd11ad8eef32b4cef9b88871fc9bc98979f37ac5dc45f3cc93e8a1395c56144da2edccb516e197d148d3ae65a9eed2c2dda4c525994cccce028fa1f3a12ea89d020867a7eb139f940dcabda500adfe86dbd360ec2531678b93b838e8039f8df3ff6b794bca74aea52356d43badc037f6acc3f262ffc1433c5f6fd61b0293eadd90423344ed091d56999b83797e7f6b0ce7eecea955cefa5652826e61116475c3ca078015e1f927071758fd4fe"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x5, @device_b, 0x20, "", 0x8, 0x9a54, @broadcast, 0x2}}, @measure_req={0x26, 0x1e, {0x80, 0x81, 0x0, "c06cb4756b58ff1b28c8f21592e72d4e6113ebbce122a44d98295d"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5cb90a16eb6e"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf256000000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x208}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x61, 0x3, 0x20, @local, @dev={0xfe, 0x80, [], 0x38}, 0x40, 0x0, 0x6, 0x9}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private2, @private0, @empty, 0x9, 0x80, 0xa0b7, 0x0, 0x3, 0x20, r4}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)={r5, r6/1000+10000}) 21:43:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getgid() mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x20010, r0, 0x0) 21:43:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x1a, 0x4, 0x400) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) write$char_raw(r4, &(0x7f0000000600)={"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"}, 0x800) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2b4, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x0, 0x8, 0x2, 0xdc0f, 0x7, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xbc267c25a6d7e547]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0x7, 0x6, 0x6, 0x8a13, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x2, 0x1, 0x5, 0x2, 0x60, 0xb9f]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x6, 0xb, 0x2, 0x9, 0x5, 0x3, 0x30, 0x1b, 0x48, 0x18, 0x6, 0x48, 0xc, 0x1b, 0xc, 0x2, 0x60, 0x3, 0x3, 0x1b, 0x36, 0x4, 0x48, 0x2, 0x1b, 0x60, 0x6, 0x16, 0x30]}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x0, 0x36, 0xc, 0x12, 0x24, 0x1b, 0x12, 0x30, 0x6, 0x12, 0x1, 0x6c, 0x77, 0x36, 0xc, 0xb, 0x1b, 0x0, 0x9, 0x60, 0x60, 0x60, 0x4, 0x6, 0x1b, 0x1, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3, 0x8, 0x8000, 0x8001, 0x7c0, 0x888]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1498, 0x101, 0x1, 0x3, 0x2, 0x2, 0x7d7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x32, 0x36, 0x24, 0x9, 0x4, 0x48, 0x18, 0x16, 0x6, 0x1, 0xc, 0x1b, 0x0]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0xa}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x7, 0x8}, {0x1, 0x4}, {0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x2, 0x3}, {0x2}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x8}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x6}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0x5}, {0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x8}, {0x2, 0x9}, {0x4, 0x6}, {0x7, 0x9}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0x5}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0xb, 0x0, 0x32f0d6022016c75f, 0x16, 0x1b, 0x9, 0x24, 0xb, 0x1b, 0x60, 0x6c, 0x6c, 0xc, 0xc, 0x48, 0x3, 0x1a, 0x0, 0x24]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0xffe, 0x0, 0x7fff, 0x9050, 0x6, 0x1]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5eb, 0xf786, 0xc3, 0x8, 0x0, 0x1fe, 0x7, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0xa}, {0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x16, 0x12, 0x18, 0x16, 0x16, 0x18, 0x1, 0xb, 0x36, 0x4, 0x12, 0x48, 0xb, 0x18, 0x9, 0x24, 0x60, 0x0, 0xb, 0x6, 0x7d8fcc9933bfc1c, 0x5, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x30, 0x18, 0x4, 0x9, 0x60, 0x5, 0x36, 0xb, 0x9, 0x12, 0x30, 0xb, 0xb, 0x6, 0x1b, 0x4, 0x36, 0x16, 0x2, 0xb, 0xb, 0x24, 0x6c, 0x36, 0x6, 0x18, 0x6c, 0x6, 0x48]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0xb, 0x16, 0x6c, 0x60, 0x9, 0xb, 0x66479757ac6d30db, 0x6, 0x5, 0xc, 0x30, 0x9, 0x1b, 0x6c, 0x6c, 0xb, 0x18, 0x3, 0x2, 0x24, 0x1b, 0x4, 0x3, 0x30, 0x36, 0x60, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x29a982a312af06a1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x0, 0x4, 0x36, 0x9, 0x24, 0x12, 0xb, 0x3, 0x6c, 0x6, 0x5, 0x6, 0x18]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x1}, {0x2}, {0x2, 0x8}, {0x3, 0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x1e}, {0x3, 0xa}, {0x5, 0x3}, {0x6, 0x8}, {0x4, 0x1}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x2, 0x5}, {0x0, 0x8}, {0x7}, {0x7}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x4}, {0x4, 0x1}, {0x1}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6623, 0x5, 0x9, 0x2, 0x6, 0x9f, 0x4]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0xbcc, 0x4, 0x400, 0x3ff, 0x759, 0x101]}}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x60000a1}, 0x810) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x240901, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) connect(r0, &(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x80) 21:43:33 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001500)={&(0x7f00000013c0), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x8800) connect(r0, &(0x7f0000000080)=@ipx={0x4, 0x3, 0xffffffc6, "ce285c21c300", 0xbb}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000140)={0x12b8, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4c25}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x32e}]}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x120c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "b2ce53c923254d06f6337eded79fb8ef48f9442924066a4d6c956a4416129349342d147dfe06b9cae9c2c42852eb84dbba7fa5a2a3dcef5ba20ddf1ed9aaab18"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "155f7e73e17d73841f60bd8e6679780241364d1d14e70b6beb4fd700409f5bff9f4fb39b27971bcc247ff08d2c2fbfe80b52fc53c36cbe1f81c0f549387c2f585d22f26aabdbca512dc53db99cee2cf755444ac4c2d9dece4d1682257c4268382d221e5b40b6f46d827004e94a98bd8db5970d736dcb520a6758041b04322d36606711d5f767808bb759f1ea38d062fb1efc46565b5920678f98b4a747ec0cc56d8d0334de8acbe12d3a"}, @ETHTOOL_A_BITSET_BITS={0x48}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "5ec144d8bf7eb43bd8a5a54afd8a2c6dfcf21c5321e58940b83ca5226d7b0236270ce64d4a1d330bdf01a4e802c08906404c431ac0846b85d6b60afaf8b7bcc7e433cf3a9da8f8fff237a3fa1d0946ee4e6a53c00c30b4432f79fb43c40245852d07ea2f3b88b4f97f062f260502fdb7399361cdd48c1d3f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x10001}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x20000011}, 0x20004090) 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x10010, r0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0xffffffff, 0x8) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x0, 0x4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000fbdbdf250000000008000700", @ANYRES32=r1, @ANYBLOB="08000400ac1414aa08000700", @ANYRES32=r5, @ANYBLOB="0600060000000000080008000000000008000500ac1e0001"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0xe96b, 0x2}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x2, 0x16, 0x3, 0xd240, 0xd0, 0x6, &(0x7f0000000100)="f2fc131cc025dece091d5d94ea30e4c9c01cc540f0f4a1f2f0db84dff2521b0d9e8b78c3ab4779d2dba137101feb138ad8cd1a7be80a9ca3b5a8a169bf8d440156c2b6738c957a51d04497f5ec208e2ffa186c7a55491273a5f370b16977ad9332d44321911ef4275bc95659ef711acc7168f7f6997542433ab1d5a55a6a067326a43b66ac704ea899e5459d38364f0fef4673173f267987d722502c0bc37b9fef38c6266dfcc89ffa07080681121b7b93451acc2130e0a95e6d2224fb77c5daaed1d7f5c531b2d155e44f31d3a2a35a"}) 21:43:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x2, 0x80000000, 0x62, @local, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x7800, 0x81, 0x8}}) 21:43:33 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x31}}, 0x80) 21:43:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f4, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c4, 0x2a, [@ssid={0x0, 0x16, @random="873d102bbbffc959c125821334fc314db136589afd65"}, @supported_rates={0x1, 0x6, [{0x12}, {0x24}, {0x1, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x6c}]}, @measure_req={0x26, 0x9d, {0x0, 0x9, 0x9, "1384fa146eef6c0c0a4b48f0bfc0155880fe32faebfe7ccfd96618944f5f609ef82752439853914f769d4a92e17575d73a298d2501f46eef863371f7b388dbc01f390756264d1e717624901b3bda8de67b8aa90450366ccced82e883cff483dbea918d9164db219dc3e8df5491b5cd3a768f3cea10de1fe704c2609ba1cc1d00fbb45f784a7e5a0457fe4e51fcb62c94c0e44e9dc19c28c0c7a7"}}, @challenge={0x10, 0x1, 0x76}, @measure_req={0x26, 0xb8, {0x0, 0x4, 0x19, "70cb8c3730e529718fd11ad8eef32b4cef9b88871fc9bc98979f37ac5dc45f3cc93e8a1395c56144da2edccb516e197d148d3ae65a9eed2c2dda4c525994cccce028fa1f3a12ea89d020867a7eb139f940dcabda500adfe86dbd360ec2531678b93b838e8039f8df3ff6b794bca74aea52356d43badc037f6acc3f262ffc1433c5f6fd61b0293eadd90423344ed091d56999b83797e7f6b0ce7eecea955cefa5652826e61116475c3ca078015e1f927071758fd4fe"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x5, @device_b, 0x20, "", 0x8, 0x9a54, @broadcast, 0x2}}, @measure_req={0x26, 0x1e, {0x80, 0x81, 0x0, "c06cb4756b58ff1b28c8f21592e72d4e6113ebbce122a44d98295d"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5cb90a16eb6e"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf256000000008000300", @ANYRES32=r1, @ANYBLOB="0c00990006000000560000000600b100ff0f00000600b100010100000600b1000100000094002a001001b30868d5b6a7660703792238185e3275e0ddc22fa08fa03cbd2c4cd95e6ce67c6e538a6de8923434f09c58531c3e60ff7745ebef541d9eb3e3780297f698471a05e729d8621a57c72937334a4e39cf12c1c1a297ecc7e3222a9c51432f6cd3afcfa985baf70277a76a59f595eb2a010475160100070000008ed68dad49d6a1b1d27db3fb248e870cbd06ffffffffffff0600b100080000000600b100010000000600b100ff0300000600b1005d4100000a012a002d1a020013020000000000000002003f00180000000107000000803f710701000000ff01480301031001ec75140100090071a8508358418dbce2c2737f3924685d0020d5c1ecbe465f73695e2d28d731f2c3ed730c815425d745162205c9d0942131ab8c10390da323f0db1b48a92ca379f4fc62e0848f030900080211000001000400000d0040080211000001001000000802110000000f000008021100000103000000120040080211000000f1f00000ffffffffffff000000ffffffffffff000000003d00400802110000014f020000ffffffffffff01000008021100000107000000400000ffffffffffffff0f0000340040ffffffffffff060000000802110000003700000007002a0010010400"], 0x208}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x61, 0x3, 0x20, @local, @dev={0xfe, 0x80, [], 0x38}, 0x40, 0x0, 0x6, 0x9}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private2, @private0, @empty, 0x9, 0x80, 0xa0b7, 0x0, 0x3, 0x20, r4}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)={r5, r6/1000+10000}) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x0, 0x4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000fbdbdf250000000008000700", @ANYRES32=r1, @ANYBLOB="08000400ac1414aa08000700", @ANYRES32=r5, @ANYBLOB="0600060000000000080008000000000008000500ac1e0001"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0xe96b, 0x2}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x2, 0x16, 0x3, 0xd240, 0xd0, 0x6, &(0x7f0000000100)="f2fc131cc025dece091d5d94ea30e4c9c01cc540f0f4a1f2f0db84dff2521b0d9e8b78c3ab4779d2dba137101feb138ad8cd1a7be80a9ca3b5a8a169bf8d440156c2b6738c957a51d04497f5ec208e2ffa186c7a55491273a5f370b16977ad9332d44321911ef4275bc95659ef711acc7168f7f6997542433ab1d5a55a6a067326a43b66ac704ea899e5459d38364f0fef4673173f267987d722502c0bc37b9fef38c6266dfcc89ffa07080681121b7b93451acc2130e0a95e6d2224fb77c5daaed1d7f5c531b2d155e44f31d3a2a35a"}) 21:43:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x13}, 0x10) 21:43:33 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x80) 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x4d13, 0x17, [{0x7, 0x1}, {0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0xf}, {0xd}, {0xf, 0x1}, {0x0, 0x1}, {}, {0x6, 0x1}, {0xb}, {0x8}, {0x8}, {0xf, 0x1}, {0xd, 0x1}, {0xc}, {0x6}, {0xc}, {0x0, 0x1}, {0x8}, {0xf, 0x1}, {0x7, 0x1}]}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x0, 0x4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000fbdbdf250000000008000700", @ANYRES32=r1, @ANYBLOB="08000400ac1414aa08000700", @ANYRES32=r5, @ANYBLOB="0600060000000000080008000000000008000500ac1e0001"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0xe96b, 0x2}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x2, 0x16, 0x3, 0xd240, 0xd0, 0x6, &(0x7f0000000100)="f2fc131cc025dece091d5d94ea30e4c9c01cc540f0f4a1f2f0db84dff2521b0d9e8b78c3ab4779d2dba137101feb138ad8cd1a7be80a9ca3b5a8a169bf8d440156c2b6738c957a51d04497f5ec208e2ffa186c7a55491273a5f370b16977ad9332d44321911ef4275bc95659ef711acc7168f7f6997542433ab1d5a55a6a067326a43b66ac704ea899e5459d38364f0fef4673173f267987d722502c0bc37b9fef38c6266dfcc89ffa07080681121b7b93451acc2130e0a95e6d2224fb77c5daaed1d7f5c531b2d155e44f31d3a2a35a"}) 21:43:33 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000012c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x101840) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000001300)) getsockname(0xffffffffffffffff, &(0x7f0000001100)=@can={0x1d, 0x0}, &(0x7f0000001180)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@raw=[@map={0x18, 0x8, 0x1, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, [], r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0x8, 0x5, 0x2}, 0x10, 0xffffffffffffffff}, 0x78) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r3, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x800000000) 21:43:33 executing program 4: connect(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) connect(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0x1f, @remote, 0x9016}}}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000080", @ANYRES16=0x0, @ANYBLOB="000108000000fbdbdf2502000000300001800800060004000000060005004e20000014000400fe80000000000000000000000000003f080006000500000008000300060000000800020005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008840}, 0x40000) prctl$PR_GET_THP_DISABLE(0x2a) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x0, 0x4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000fbdbdf250000000008000700", @ANYRES32=r1, @ANYBLOB="08000400ac1414aa08000700", @ANYRES32=r5, @ANYBLOB="0600060000000000080008000000000008000500ac1e0001"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0xe96b, 0x2}) 21:43:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f4, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c4, 0x2a, [@ssid={0x0, 0x16, @random="873d102bbbffc959c125821334fc314db136589afd65"}, @supported_rates={0x1, 0x6, [{0x12}, {0x24}, {0x1, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x6c}]}, @measure_req={0x26, 0x9d, {0x0, 0x9, 0x9, "1384fa146eef6c0c0a4b48f0bfc0155880fe32faebfe7ccfd96618944f5f609ef82752439853914f769d4a92e17575d73a298d2501f46eef863371f7b388dbc01f390756264d1e717624901b3bda8de67b8aa90450366ccced82e883cff483dbea918d9164db219dc3e8df5491b5cd3a768f3cea10de1fe704c2609ba1cc1d00fbb45f784a7e5a0457fe4e51fcb62c94c0e44e9dc19c28c0c7a7"}}, @challenge={0x10, 0x1, 0x76}, @measure_req={0x26, 0xb8, {0x0, 0x4, 0x19, "70cb8c3730e529718fd11ad8eef32b4cef9b88871fc9bc98979f37ac5dc45f3cc93e8a1395c56144da2edccb516e197d148d3ae65a9eed2c2dda4c525994cccce028fa1f3a12ea89d020867a7eb139f940dcabda500adfe86dbd360ec2531678b93b838e8039f8df3ff6b794bca74aea52356d43badc037f6acc3f262ffc1433c5f6fd61b0293eadd90423344ed091d56999b83797e7f6b0ce7eecea955cefa5652826e61116475c3ca078015e1f927071758fd4fe"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x5, @device_b, 0x20, "", 0x8, 0x9a54, @broadcast, 0x2}}, @measure_req={0x26, 0x1e, {0x80, 0x81, 0x0, "c06cb4756b58ff1b28c8f21592e72d4e6113ebbce122a44d98295d"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5cb90a16eb6e"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf256000000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x208}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x61, 0x3, 0x20, @local, @dev={0xfe, 0x80, [], 0x38}, 0x40, 0x0, 0x6, 0x9}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private2, @private0, @empty, 0x9, 0x80, 0xa0b7, 0x0, 0x3, 0x20, r4}) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x7fe, 0x800, 0x32, &(0x7f0000000000)="f84ef51d494da7b1283b99ee931bf6df8799c853164b19f8b28fc2f1316c176107994d75356862e2ca9af391be3a2cf3499a"}) 21:43:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x0, 0x4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000fbdbdf250000000008000700", @ANYRES32=r1, @ANYBLOB="08000400ac1414aa08000700", @ANYRES32=r5, @ANYBLOB="0600060000000000080008000000000008000500ac1e0001"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) 21:43:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000640)={&(0x7f0000000200)={{@hyper, 0x4}, {@hyper, 0x80000001}, 0x400, "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"}, 0x418, 0x3}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf88, 0x7}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0) 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x3ff, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2, r3}) 21:43:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f4, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c4, 0x2a, [@ssid={0x0, 0x16, @random="873d102bbbffc959c125821334fc314db136589afd65"}, @supported_rates={0x1, 0x6, [{0x12}, {0x24}, {0x1, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x6c}]}, @measure_req={0x26, 0x9d, {0x0, 0x9, 0x9, "1384fa146eef6c0c0a4b48f0bfc0155880fe32faebfe7ccfd96618944f5f609ef82752439853914f769d4a92e17575d73a298d2501f46eef863371f7b388dbc01f390756264d1e717624901b3bda8de67b8aa90450366ccced82e883cff483dbea918d9164db219dc3e8df5491b5cd3a768f3cea10de1fe704c2609ba1cc1d00fbb45f784a7e5a0457fe4e51fcb62c94c0e44e9dc19c28c0c7a7"}}, @challenge={0x10, 0x1, 0x76}, @measure_req={0x26, 0xb8, {0x0, 0x4, 0x19, "70cb8c3730e529718fd11ad8eef32b4cef9b88871fc9bc98979f37ac5dc45f3cc93e8a1395c56144da2edccb516e197d148d3ae65a9eed2c2dda4c525994cccce028fa1f3a12ea89d020867a7eb139f940dcabda500adfe86dbd360ec2531678b93b838e8039f8df3ff6b794bca74aea52356d43badc037f6acc3f262ffc1433c5f6fd61b0293eadd90423344ed091d56999b83797e7f6b0ce7eecea955cefa5652826e61116475c3ca078015e1f927071758fd4fe"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x5, @device_b, 0x20, "", 0x8, 0x9a54, @broadcast, 0x2}}, @measure_req={0x26, 0x1e, {0x80, 0x81, 0x0, "c06cb4756b58ff1b28c8f21592e72d4e6113ebbce122a44d98295d"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5cb90a16eb6e"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf256000000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x208}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x61, 0x3, 0x20, @local, @dev={0xfe, 0x80, [], 0x38}, 0x40, 0x0, 0x6, 0x9}}) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/81, 0x51}], 0x7, &(0x7f0000001540)=""/133, 0x85}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000016c0)={'ip6tnl0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x7, 0x3f, 0xe, @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x7800, 0x10, 0xffffffff, 0x7}}) 21:43:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r0) keyctl$unlink(0x9, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r4) keyctl$search(0xa, r3, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, r4) keyctl$negate(0xd, r1, 0x5, r2) keyctl$unlink(0x9, 0x0, r0) keyctl$clear(0x7, r0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r5, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x0, 0x4) 21:43:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300)='ethtool\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000c00)=0xe8) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}}, 0x40000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x3f, 0x0, 0x4, @empty, @loopback, 0x700, 0x7, 0xbc, 0x2}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0xc2, 0x6, 0x1ff, 0x20, 0xffffffffffffffff, 0xfffffcb5, [], r5, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x40) 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x3, 0x8, 0x5c8, 0xfff, 0x7f, 0x3f5, &(0x7f0000000000)="9f924b9a1c14bc9000373917489c135709c4aee63ef9a3e52ed6a7d7e5a96154af0af7e38235bbc5f1b1545784661b1805b2d13978f602fb16a5fca954ec9fdfc9f1dd759a1de3979714ed306f37d2ba0dc440b488370b38ba16d5232cc9541b184cf15f57cc588b0768c228ff92d49a3536bc8b79c59fd1d2863f9abd1e51"}) 21:43:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)) 21:43:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0x3ff, 0xf7, 0x800, 0xffffffffffffffff, 0x1, [], 0x0, r1, 0x1, 0x3, 0x1}, 0x40) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r2 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0), 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x29c, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_IE={0x12e, 0x2a, [@tim={0x5, 0x25, {0x7f, 0x1b, 0x3, "7a4998c192912fab24878352c6f978f18b43a7f3dceff1c83e511b9240c66c106d2c"}}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1}}, @tim={0x5, 0xd2, {0x2, 0xf5, 0xfa, "125d90d07a4db8280835331262be192d9258e1b59de21bca635dd20a4e35545447677f381df39934add4c1b29ac9be0408e798f755c6232b2bd4d142c74a3f5846853dddc7ef5e54eb2c2aaef6c12a70cd60bbb59729dc8df58aac7ce1ea12fd408db04ce786028ce2df43d3d76be2fdae9a7860f30f52148792f5a2aa6c0ce04915aa858b12037de98dac5067a3bbf7c655b51ce0eefad1259d235376cd3a32837ac88fc69f669cd4ff364d9f50065d857eb58666ddaaf5debebb661e3ae1ae1ed91dba681723fa41eed0932689b5"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3f, 0xb9}}, @perr={0x84, 0x15, {0x71, 0x1, [@ext={{}, @broadcast, 0x6, @device_a, 0x29}]}}, @ibss={0x6, 0x2, 0x800}, @dsss={0x3, 0x1, 0x2c}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_IE={0x10b, 0x2a, [@tim={0x5, 0x3, {0x92, 0x1d}}, @fast_bss_trans={0x37, 0xfd, {0x7, 0x7, "1c7ebbb738fdc95d927514bfde31fcd7", "a60be2b1b89e83570241465bda856acfc466187ef52e5a6ebd4b559a86a2ef46", "f2492e9029efdc4822e680b0a7158e0f64f7dc85eb0e701920cf84cef3f5163a", [{0x1, 0xc, "4bf3bb009f8a938fcb1f14b6"}, {0x1, 0x25, "1a0a040c7c8fb351c3fc87edd0a5e79061dd9dc0ba957d47bcf758c35aa2d915d1494e148f"}, {0xfa, 0x23, "b9ef2daae626baebe9386984fc0e3895b0f6bd04394bae9ba6bc38130ebcee132099ce"}, {0x1, 0x6, "7b4555c4a214"}, {0x3, 0xd, "f1190f8cedbc55ec48c26612ae"}, {0x2, 0x15, "b2b379dcefc6970baf5e7c0431ab853e6a75a16eaa"}, {0x3, 0x21, "bce95e34eae7ecb0e6161b6ed8b3bc3b07b2df307bdcc839a8a311a09d0105db0c"}]}}, @challenge={0x10, 0x1, 0xe3}]}, @NL80211_ATTR_MAC={0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x6, 0x2, 0x3ff}, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}}, 0x10) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r2, 0x0) 21:43:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f4, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c4, 0x2a, [@ssid={0x0, 0x16, @random="873d102bbbffc959c125821334fc314db136589afd65"}, @supported_rates={0x1, 0x6, [{0x12}, {0x24}, {0x1, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x6c}]}, @measure_req={0x26, 0x9d, {0x0, 0x9, 0x9, "1384fa146eef6c0c0a4b48f0bfc0155880fe32faebfe7ccfd96618944f5f609ef82752439853914f769d4a92e17575d73a298d2501f46eef863371f7b388dbc01f390756264d1e717624901b3bda8de67b8aa90450366ccced82e883cff483dbea918d9164db219dc3e8df5491b5cd3a768f3cea10de1fe704c2609ba1cc1d00fbb45f784a7e5a0457fe4e51fcb62c94c0e44e9dc19c28c0c7a7"}}, @challenge={0x10, 0x1, 0x76}, @measure_req={0x26, 0xb8, {0x0, 0x4, 0x19, "70cb8c3730e529718fd11ad8eef32b4cef9b88871fc9bc98979f37ac5dc45f3cc93e8a1395c56144da2edccb516e197d148d3ae65a9eed2c2dda4c525994cccce028fa1f3a12ea89d020867a7eb139f940dcabda500adfe86dbd360ec2531678b93b838e8039f8df3ff6b794bca74aea52356d43badc037f6acc3f262ffc1433c5f6fd61b0293eadd90423344ed091d56999b83797e7f6b0ce7eecea955cefa5652826e61116475c3ca078015e1f927071758fd4fe"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x5, @device_b, 0x20, "", 0x8, 0x9a54, @broadcast, 0x2}}, @measure_req={0x26, 0x1e, {0x80, 0x81, 0x0, "c06cb4756b58ff1b28c8f21592e72d4e6113ebbce122a44d98295d"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5cb90a16eb6e"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf256000000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x208}}, 0x81) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/26, &(0x7f0000000180)=0x1a) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0xb3, 0x3, 0x12, @ipv4={[], [], @multicast1}, @remote, 0x1, 0x7, 0x6, 0x8}}) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 21:43:33 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2c0900, 0x0) read$char_raw(r0, &(0x7f0000000200)={""/62891}, 0xf600) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1f4, 0x0, 0x14, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1c4, 0x2a, [@ssid={0x0, 0x16, @random="873d102bbbffc959c125821334fc314db136589afd65"}, @supported_rates={0x1, 0x6, [{0x12}, {0x24}, {0x1, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x6c}]}, @measure_req={0x26, 0x9d, {0x0, 0x9, 0x9, "1384fa146eef6c0c0a4b48f0bfc0155880fe32faebfe7ccfd96618944f5f609ef82752439853914f769d4a92e17575d73a298d2501f46eef863371f7b388dbc01f390756264d1e717624901b3bda8de67b8aa90450366ccced82e883cff483dbea918d9164db219dc3e8df5491b5cd3a768f3cea10de1fe704c2609ba1cc1d00fbb45f784a7e5a0457fe4e51fcb62c94c0e44e9dc19c28c0c7a7"}}, @challenge={0x10, 0x1, 0x76}, @measure_req={0x26, 0xb8, {0x0, 0x4, 0x19, "70cb8c3730e529718fd11ad8eef32b4cef9b88871fc9bc98979f37ac5dc45f3cc93e8a1395c56144da2edccb516e197d148d3ae65a9eed2c2dda4c525994cccce028fa1f3a12ea89d020867a7eb139f940dcabda500adfe86dbd360ec2531678b93b838e8039f8df3ff6b794bca74aea52356d43badc037f6acc3f262ffc1433c5f6fd61b0293eadd90423344ed091d56999b83797e7f6b0ce7eecea955cefa5652826e61116475c3ca078015e1f927071758fd4fe"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x5, @device_b, 0x20, "", 0x8, 0x9a54, @broadcast, 0x2}}, @measure_req={0x26, 0x1e, {0x80, 0x81, 0x0, "c06cb4756b58ff1b28c8f21592e72d4e6113ebbce122a44d98295d"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5cb90a16eb6e"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x880}, 0x801) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004001) [ 2850.750779] IPVS: length: 26 != 8 21:43:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x250, 0x0, 0xc0, 0xc0, 0x0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, &(0x7f0000000000), {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00', {}, {0xff}, 0x62, 0x1, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x101, 0x9, [0x29, 0x1f, 0x18, 0x35, 0x34, 0xd, 0x3c, 0x35, 0x2, 0x22, 0xa21, 0x20, 0x25, 0x2f, 0x27, 0x3c], 0x2, 0x8, 0x9db}}}, {{@ip={@local, @broadcast, 0xffffff00, 0x0, 'veth1_to_bond\x00', 'geneve1\x00', {}, {0xff}, 0x33, 0x2, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x41, 0x20}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 'gretap0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x21}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x12, 0x21, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) 21:43:34 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @empty, @mcast2, 0x431, 0x72a, 0x80, 0x400, 0xaaba, 0xc40004, r0}) connect(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) [ 2850.811314] IPVS: length: 26 != 8 21:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x638, 0x478, 0x478, 0xffffffff, 0x478, 0x2f8, 0x568, 0x568, 0xffffffff, 0x568, 0x568, 0x5, &(0x7f0000000140), {[{{@ipv6={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, [0xff, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xff], 'bridge0\x00', 'gre0\x00', {0xff}, {0xff}, 0x3c, 0x6, 0x7, 0x60}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d4, 0x4d6], 0x5, 0xfa}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@multicast1, @ipv6=@empty, @gre_key, @gre_key}}}, {{@ipv6={@empty, @local, [0xff000000, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xffffffff], 'bridge_slave_0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x5e, 0x7e, 0x0, 0x40}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x8, 0x1}}, @common=@unspec=@string={{0xc0, 'string\x00'}, {0x5672, 0x45, 'kmp\x00', "9bec0a181bee44b3cf67bd38dcd8558f2c731335b7beabd53e11c7e940160f2e2ee790b784748cf125fb09535e24971d704b89c183c619e546828b60a7b8286df084cf262156d2b5580bfaf5c398f325fac899a9c215070156d064f1c2d09c255b3e92afedf15e204a83ab31ded3b548587bcb92e066df30da18df6bcc2da14f", 0x1, 0x1, {0xfd5}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xe, @ipv4=@rand_addr=0x64010101, @ipv4=@broadcast, @gre_key=0x100, @gre_key=0x13a9}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x7, 0x4, 0x1, [0xfc0, 0x80, 0x5, 0x7, 0x0, 0x3, 0x6, 0x8, 0x0, 0x20, 0x401, 0x81, 0x6, 0xfe3, 0x2, 0x3], 0xa}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x8, 0x1, 0x0, [0xa2, 0x4383, 0x6, 0x1, 0xa4b7, 0x4, 0x0, 0x1, 0xfffe, 0x9, 0x8, 0x1, 0x7, 0x7, 0xf588], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x15, @ipv4=@multicast2, @ipv4=@rand_addr=0x64010100, @gre_key=0x5, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@multicast2, @gre_key=0x6, @port=0x4e22}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000280)) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) 21:43:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x42c0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x9) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0xd, 0x1}) 21:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x4e21, 0x8, @local, 0x7ff}, 0x80) 21:43:34 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') socket$nl_generic(0x10, 0x3, 0x10) 21:43:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x9) 21:43:34 executing program 2: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x8101) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0x200400) ioctl$CHAR_RAW_IOOPT(r1, 0x1279, &(0x7f0000000100)) connect(r0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x2, 0x5, 0x1, 0x2, "b9239c6c539b6d680dc405ca46003fe9feb74e9c7812e762dab9c571455198e4083e72cbe798ef674b794992b708370cc2be9d4e9e4a484ff9bc76629ac03c", 0x12}, 0x80) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') 21:43:34 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) socketpair(0xb, 0x3, 0x7ff, &(0x7f0000000440)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0xc001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x5d8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x6}, @device_b, @from_mac=@broadcast}}, @NL80211_ATTR_FRAME={0x4c0, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x4, 0x81}}, @ver_80211n={0x0, 0x81, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x800, 0x5a, @random=0x9, @val={0x1, 0x3, [{0x3}, {0x18}, {0x6c, 0x1}]}, @val={0x2d, 0x1a, {0x10, 0x0, 0x2, 0x0, {0x5, 0x2, 0x0, 0xff, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x8000, 0x2b}}, [{0xdd, 0x83, "6a27867ef60076acc41ae84c398dd294c7b179f26042b329e1ad6b038ec89e5c1e42c9248005a37e2f1a1144e69363e0b756f3d6a1d78a14bb70e4a5ae5c2befbcbd08bc33193276f72cce538ad2b4c7db3f38a0424556a8710c66af1e555e9ef4ae0941781eb4c2dc23884cceea8841d1168e3df6120eac1f8a6d6473c56f565523a4"}, {0xdd, 0xdf, "af2d4c7e930457457aa173e3356514afa8db3c199f32d6953bf6ed56a3473d65b42e85e4f3b478e22c7ffa7b1004351e684868b935cb6a39ba29acf261fdbe2d9a4254c2651bfb91061f527fd0488fa2bb6702b3354c791d53423e7a49883c5dfcc2e0c5cc98f26c2f226ac3eebf4a5e75965446d3fe6f650d8e531e724c36c3d82e014ab6e66b96cb32d863164f4ddb4e9f88529f8f0664bb7cd12bc3d12f9977c0a63c8981f85fca26925e675e08e3ac749fe60148b68cba7b4d64516f0f020743502a1822284542243c75855edfb7a0a8cd14429ec7e1269a72dc22100e"}, {0xdd, 0xc9, "430bb4851a3e343060e6c97fb49e6d9838b84cc8c3919348ba518a5017f8642e74956024896b446a974cdd8c6405c1a3f8ebeeb4cfd4c3b4e7a2c8a072ea42232c97fe4cdfe8f880fc1cc8442d9e4f41ee335e4fafa4c6844fb6cb44fdbd103ef13036e5eff767318dd91c616f85fe4d8dfa6669da9a3baebc7eabc1f6e26c05f6e687a5bb5401878dcf1d08aef7b59309a52761077c3910f3c0efd216650cf9178e172b91daf5850270d2112c0a4c3a3bc3e18b5cc6172177a053bd1130d8ec12bb3e8f5271596572"}, {0xdd, 0x64, "1bb63914f91766ad322fe01186347e0d82eebbea6d5cc8f02889f3093ef4174562417d6b7a4dc91f4ad1f0ac4bc2f37b5e566464c3b6607b2b9a76ed4beccf8353c1e28045af0e434db99b5273290b4985581d9db24afd325c26724b9fad282c28a20d20"}, {0xdd, 0xb6, "0f80b45a0028a00810a6977cb9cfc73f7986839c9ff320420be6c992b43092471da23e86ec2e065d4063e1602c6477802c3937e6979addf4c1560c6a30c95f94a9aa5e4ebd543147dc191fb34acb20ffbdaf543baf91f2e3bf719fbda91f95185d3bf64befde31165b6e63263a78fd599f4333fc338b04c524f17eae75b24c5981654b04a177636d903fc64ca0fda1dfdc1d63e669a148e9e35fcc97db9f4807b8ada6b498e0bbd4867318791ad9c6af581a61514ad4"}, {0xdd, 0x87, "6cf7850f30405a385535174627b1414e083a707eb6303434b51603c81062114057acf5ecb7624666dfe71647180ebdfe1cca8288bdce3106a318df2eb1da88132c31ccbd83b493b3bf17a2bfb0f11d372e2fe55d4bb77b6354c3d99675adfee8c8473f49cd1165075bac1d0e7b163050c48661d6bfe517615bd66ee7d3f78512dfd07a99e5b140"}, {0xdd, 0x9f, "80a0e9242e0cbabb3adec52a831e14eec9e60931beabe2dac2ac36bad4ce92730822515a9356aab3c3e9401ee2f7463377480ca67643f9bea4156ed64c08430ab84bea5648c3e201bd9fa5e8314979cd7c917a94c4dd163e13d99b630bb9775911a3e74c09dfc5ccd28ec127edc30caf2d4267fec4837e28ac83bf0128b6d55472450ac3470b2e78f19c9d476ceb124bba19b6f9c26e585574ac4198bc90fb"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x9}, @broadcast, @broadcast, @compressed={{0x1}, {0x5, 0x40}, "20e1b4c7377f78ab"}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x80}, @device_b}}, @NL80211_ATTR_FRAME={0x97, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @random="5156aec7dbd8", @broadcast, {0xc, 0x7}}, {0xe, 0x1, 0x0, 0x0, 0x4}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x1}, {0xb28}, @device_a, @from_mac, @from_mac=@device_b, {0xe, 0x1}}, {0x7, 0x0, 0x1, 0x1, 0xff}}}, @ver_80211n={0x0, 0x3, 0x3, 0x1}}, @random="2074daf3e236d9c352467fef090b3851b0ad9f3f8dd12d4468e897f12e70b8414f7d96c587cdfeda57f9540287f74b7a7383faf154f84892f61640b9e82a5190de498cdc380d80866baa80093419636646956c79b819b277b849b6"}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x44050}, 0x20000000) recvfrom(r1, &(0x7f0000000480)=""/144, 0x90, 0x20, &(0x7f0000000540)=@x25={0x9, @remote={[], 0x1}}, 0x80) 21:43:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="fd6de6f851743767c1efc6109515041a33092300a6e939c3680f45169719e99d9a4936c642bce90129b94360daf543b32877a47b4e7672690e4a3fbcb7a6ab29d9c22864fc2d553122589663e5714daf94a6d7d0bfb0e1c93856381afc235817b4825662dcecd6aaebdfad68185973a880ad16827793c6e7873fcb54ca0e70ae98e04b90367dda5b576c5a51cb43216a", 0x90}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ffc0000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}, 0x20000004) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x190, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, 0xffffff00, 0xffffff00, 'lo\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2, 0x20}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x3, "02de", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x4, 0x5, 0x4, 0x3, 0x2], 0x3, 0x2}, {0x2, [0x2, 0x5, 0x4, 0x2, 0x1, 0x5], 0x6, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0xff, 0xff000000, 'veth0_to_bond\x00', 'veth0\x00', {}, {}, 0x16, 0x3, 0x68}, 0x0, 0x1e0, 0x240, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xb, "42c5"}}, @common=@inet=@sctp={{0x148, 'sctp\x00'}, {[0x4e21, 0x4e21], [0x4e24, 0x4e22], [0x6, 0x0, 0x4, 0x8, 0xfff, 0x8001, 0x7, 0x2, 0x1, 0x5, 0xfffffffa, 0xfffffffb, 0x7, 0x200, 0xffff, 0x8, 0x2, 0x2, 0x7, 0x5, 0x1, 0xffffffc0, 0x0, 0x8, 0x1, 0x0, 0x1, 0x2e3, 0x2, 0xc76, 0x5, 0x9, 0xf66, 0xfff, 0x2, 0xffff, 0x1000, 0x7ff, 0x100, 0xe51, 0x1dac, 0x1000, 0x2035, 0x3, 0x5, 0x10000, 0xe, 0x1000, 0x7, 0x5, 0x480, 0xffffff1b, 0x39, 0x4, 0x40, 0x8, 0x100, 0x1, 0x0, 0x3, 0x5, 0x7, 0x3, 0x8], 0x4, [{0x8, 0x7, 0x20}, {0x2, 0xff, 0x3}, {0xb4, 0x1, 0x28}, {0xff, 0x3f, 0xc7}], 0x0, 0x0, 0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x20}, 0xff, 0x5, [0x23, 0x3a, 0x3c, 0x1b, 0x21, 0xc, 0x28, 0x12, 0x39, 0x8, 0x1f, 0x40, 0x27, 0x34, 0x19, 0xc], 0x2, 0xfffffffc, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000080)) ioctl$CHAR_RAW_RESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x0, 0x800}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000100)) 21:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80) 21:43:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@broadcast, @loopback, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x3, 0xffff, 0x2, @mcast2, @ipv4={[], [], @loopback}, 0x8, 0x7800, 0x7, 0x5}}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0040000", @ANYRES16=r3, @ANYBLOB="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"/1288], 0x4e0}, 0x1, 0x0, 0x0, 0xc4}, 0x10) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) 21:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80) 21:43:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0x800) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xff2, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0x2de, 0x4, [{0xf, 0x1}, {0x7}, {0xd}, {0x0, 0x1}]}) 21:43:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x7, 0x1, 0x4f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x200, 0xfffffff9}}) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x0, 0x10, 0xfc00, 0x81, 0xe5, 0x8, &(0x7f0000000180)="dacd1b8f59b51ef28f4aa570124104b0080e12da87bef837a735d30d468b1c9c27d9e1bb02ed8f79835db283206b3a2fe601fc39f412c1bd32029caddc81b6ca04ea0203fa8526e34ed425748c75c3eecaebd46cc65d7e9d2031a01684e1d12e5dd25c700c99fee87020cc39c52ec50b2bd088d3b0aff4917d3089cf3ed2c1fce5be52330080baf4ba2293b15c1f03e4c1aa5eb45ae57679c42e992274d3ef407ddedc7c90d6a5b9195e04e9469d932e16f88db2d902660f871370c61b4e21d348d721ef3a6e37ef5f510c53036ca8fca655c53866b8a3f8a977d72539ecd85dca3421d91d"}) read$usbfs(r0, &(0x7f0000000340)=""/4096, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@deltclass={0x88, 0x29, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xa, 0x5}, {0x1, 0xf}}, [@tclass_kind_options=@c_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}, @tclass_kind_options=@c_netem={0xa, 0x1, 'netem\x00'}, @tclass_kind_options=@c_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x34, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x2, 0xffff, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7c, 0x9, 0x8000}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x8001, 0x10000}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x10) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r1, &(0x7f0000002d40)={&(0x7f0000001540)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000001580)="4862055480648c8beb", 0x9}, {&(0x7f00000015c0)="b2a8b7d91f170a6d11949a32621d98b48c05f568528d64bac6470744ed9ec6322e23d8c82632e77a7387997fb896bf62c1e8bc9b6629571011ab34851c1723ee8aee60b35a2823fb4a36365f123cb95ac5d3ca977c1f699fc71c1e55f6122633cdaedbfbd4116304892fac6cd6b217076de2a2a07d3dd5f1cfd809732fa8ed13977fbd6b5e458c0eff9213d0014d3e7dae75e89144", 0x95}, {&(0x7f0000001680)="419e31907b1e58df87d1a741417c89be66f2b576973c9571abf87e6c0306f7faef9b54c52842f9d102ff3af1d3604e3debcb63c28ceefd1e4055861e131adea3874b2eced373d98d2c9f87304b0efad4da42a97e2516183a2fc4939e332b4acde9bf553432ff99f73a7af1d157e42b8d4186e8aa38f7aabafc5ff390a1925583407cef8ca0f73d96a8bcae9b15b6afdd44c7cb66545fe67084b62569304045b2d65366bd1aef9f27f5c2c17f45a7ad58675f0854b21d6c2ed60b10251312d601e621afd6618657fc22562509d71d240f54cf6a9f42a9c4823ed831219b02d8963bb45a9d1d38b147be07e9ba664219", 0xef}, {&(0x7f0000001780)="2b1b20c80a0b19873eb1c29092d0fd9fef860586e03dbabbbbe8054caad6e8452e324474ef3596f892a569089dc0ab2f7265589adcb7663fe8a6c60df1df47f53d211ec1f895caaa071c2b0f0b06b91478479922239f014ce2e50f31b9391067ae1964e7310f5f210dc5", 0x6a}, {&(0x7f0000001800)="20e84cf24d53d4f22ddc18b3f3f3ab4f40dfaca1df72f2db45b1b31e26b30f1145a19f1d670790790d319ebb4dd715a254fcee7b410f84336fab4c7da0f3d3f15382c7580a4b104d7fb9aaff1a2ec0d2d875e5cc8566853501e37bcb09e14bfb2ebdf4ebf4a61bb31fd68ee52f3c1e80e795805412f3fa3be40218bf78963cd7eb565b14573d08dbf2a617a15854837d4b1ed5341334dd9a73307ba350e3be522ba6aeef483243b694fa793b98dae58cdd0633fe01c2bee0a610845237086feb71f3079b25456ba8bce472f466b6cc0d27ef579c491870a24a9a09e065e49cffc0b851696cca0bd4", 0xe8}, {&(0x7f0000001900)="156561b71d0b99cce47994d79fd115eadd2654eb21fbd741f72938bdc7b9e006634e4181e54e139ec2898ae8469d265b85b7f9eba53fdc3371c9216cc3dd44eba5f186014dfd100461a95505afb963b7bdce67b6b82a9f2abd4eb4e9115f0f327dc8aeeda7cb952b467e20634b7c444d483345798dbc97cb19fe85007d6f7cd54c23ed0cd83db5", 0x87}, {&(0x7f00000019c0)="eb50d5b07fca1e86c291a1c064850df4093090e3a1b0b4d52e46191cb321c269b6237960", 0x24}, {&(0x7f0000001a00)="d1989935549f84924e02d4049035f1fae8f79116ba8aaf03a2659f728d9f0a9f4fabb1e673ffb50a60881abb03fc368e29542d7e40405da6ddce09ede79415938f688e6349dc4af5b981cab7615184c346a7fd97792be36c8934d417ed175339d7f6f4871baa8952e9007515598cd1d2e373fec1094006743c9e27f35db172abcc57de41917e85031b2466a0acdc0e024cc5ebcaed3419548f8a1a018e874c07d00192080611894cfbcb78a5b106459dcdff20efc9914d432135e6f871811cf774ef960d8f188879995312912795f8413bde95b96c6839aa8bf060452e239afbff33ff527addd20da6b5645d074e3a17f69b65e69eafdfc61c793da03b301e50a7a81f999ce30c2b0d7a04a3330aa9e6af916b72aa396b09f8d437d5e80b01fadc34f3c0d4ae76a4a9bd18bf481b843adc6d2b987cf453c8fd5ac3ffbe1cbbae24662c19d49c55b5e4e6aafc94fe366ee812e6da811e105d29961c3de8dcf5d4a704fa293e281b2c9fcdeb68116753eb13bd83d28d4fa98a15a8e01b25dedf09db525e6fb511dc2bb9a747e4d7cfa5d86298640531e91acf1c8bc7b03ab5bd74e6e8c4ac833e9d861e9b5faa16159db169871f9ea1d3f603e1d36a4abb9be46cf1b8211bc70a89777cdffc9fd878e46b38f6d5e5212ddb11038199afb7831bb03b2784d495a0d902ccf7b43e8919c88c810181fd637f3f7b62ac641ec1bf0c087eac548f85c86c2e7a058a9caf6eade7ff944feb2fc8298a4b71c581e88052dc2c281f28097652698ff851a752bd5825e8e90d30757a4d9a90f993c83e123a0bfd6e0eecfd010148d12eeba7a06ed091dd6b7f48ccf65ebe6b075f0aa6607e070782473a7905b15f60fd9bac72d9d7decb391ab4b4ee2bbd923f3f78081c06a297c5a3f6d143590a132f64e4185c6c095e08d19fb013b7b9fac3952e79ed633441f1fbaee17cded450e6432902bf79031ce3803ed767ab27bbf3b24cc16a4f75a85e0e3a482a26e00356e8c4d68c6ec7dfef7a2b5ccd7fc616a4d25a504b24b0c217386763a631f6366921468cc685677526f27109aff4698de6f942c6d521988d140a880fedcb3a47db521524075cda089f9c1d21d20c8e6361fefb1ecc6522d796a2df03b741c2de5e02ed17e0c28ebbc1e28c904220dd5af03d7fcaecb85858e83b870d4887f44ff4579a17782930a76254ac9cdcc71ec10ece27d7bfbf7739fc041c2bd8226c3870ab921550462d9972f4f273e50fa93497d384b874d4b412bef9ef632a92d47babfe88948d57e20fc35d1feb250b5665d72f2200d40a906f8a21a63b05c89ba0a4c0292caf5b4c4727cc7cccf2d9076a6d232b06f8932007160dbe66f2934af4a65bc4b3155663322b309c8af2b53b88e4720ea2b695491a3e5f303c38f9396d5d88aa2af6248649271d69507e764e82fe1a5cfc493a6b503ad375b0a7351304ec90105864878b1facb2ab5b05f0ad0db1250db108734e922aba6428ab4a886e6001d67303379e18ad7bc30ddec94444770eb9703290fdb54095772c6a45ecd50f2ec79992783a5adae59f074cc4eaa1b413185a2481a8ddfbf2d975080a42234cab7e9684a7be0c89e834e455636eddfdf19313682c7356b99afd69c54f9ea2853f25421099bc9d20ef6f69b1c522ce0e743c9bcf9855501eaf5b20ec6edd84507ed090d065e7fbefd2ed9c9ac334a3ffaf6789abb762ce8f6246827d52390506199605ded65f5922cbc1ac92b02589331f64e1bab7ed28d62202e0e4fdc96becc88b6a0ebff351ecde0f43f4f2f3fc028b02978e2a657844d5ffe62e52c634c6271d1b754d574fd078aadc5ccef006b639527aa7d92fe92ee7fbd681e5f404f576fc991fd0533e0d551731a871602c40bb512297b4fab55015de6a3fd500ae66bd9b80f59a0623a7b29f2621d3d3d3cf52f59dbb2b064f6462f48cd2870bc5f3ca3820b6fe89477a1914ac81976ea32248ca4afba67f54ae68ebeb251841ccdfea0874d5f6e83438452b4089a3a98ee0050912fb68f2a5d8a7fdb7f1a6151726a98bb5c5003fb7a5cb4b38e80a2feb5378558f50489ee4000bfec6be06fca44e92c5b7d0d950d5c381d52b912786d1d88ad20ad992e91e53112eeb3f672bd088bcb4f1399cc6b086f50d27ec3b62a09a0ec85f759f2f7d739219140c8f9297bd2cb7b1f3da718d45c1a2f1bf36bd3458f12e15af96546d5c8edf9d6fa6c396627bed67d00a0b5b1acb72ed8cbd6ed9760318b22e68eb929d3d92502be1dfbdb5ebe648461efd21d3ba655ce08d57fec8c3b9e5ba60ea40f61c63465b34d7c064dfaa5924464bb20110befa7c7f94bdeb017b41940591b302df42c0f60a05cfa4f8bbcd819abf2cd07276cab56a5cb9da995b3b04d2ac29c9af7195867679b9bda79e9c8b35c2cc8a78af497bdb48c92b3f03b0366dde3baa7e4054432b2e7c97d10eda370f5427cc35f0532a2ce3fa96e2a52de4432f0970c0eb9b7a30ca0b10fecce2a4952f090dc27be0b062353a44c457838a8eede560e116fa95c9c0b31e6a9f99c45c9b1e50612eb3d84032924724b5636956a901f08b442044f93bc34deff70ceb0ef077391d3b724e9530f7b6c65ca71fbe32e17e1cab56eb55295ba1016e267221bad770ac8086421edee249b8827473ac9742f7d2a094afa7c21d26e6de2f3212afbab9a1f9bf144c3a8efab75a52335430799afce63fe071838a33e79a9a11e7439e091911ea315737468bf61a53817b501042aedcb59fb518c377761950d60bf654db68d693685a4a480bb34559c89185272e7f0481d186a13b93635fbaaebfb45855bf2ac2ecb1ce50c4611b0a81b6640390b821156b6cf9c2e59f567b24cc77674f9b01743f23bfaa101a11c74b963a08b10a796c87c57a5be3d0791c83ca4692b0ac19ff05c5b5132c74faf0e163419b2a4e28edbad4e581240cdb863cb92b6c83c6b6d648cacb144e20fad09ed42c438868087bd97965b9b36ab89544e66fb8d78b4498914df5c36a6a61e3c5a19f2d6a8ac08d15d5b69b0e0169764fe539dc039ac460cb6cdb1b0f54fb8dc5867f0b49993f6966d8e29d09e71e2b5c3eb04a440cea72fd4f4afa8e4b9ac903fd7ae1db9b693ccb1114ec31713e60727f9d23caa70bbd43f7b3e186315bd4b0c04bec703eaf32c7401aae28b50c69a013438637ec7a800165448c3d0ea4f3c03f73b738977f21ccf1817349802e9da540e334760682d680c826d45b40db5b4dd0f54117c13088ebb9dd7d52afb79cfd0e62c5806054f547cf8fa59ae780af896105f011f1015c2a33414ce53a4f32ff368b0dd11aa2521a9dcf7c63ca3abfca6cc39b2d6e62300612d6dc131b039e65cdde3a060348b9dd0fb3aa7d0aee432432cbcf9aee86d9625201142e0a03264060bfef8e983e99ce4867fdc0c464d3ccf9e62a6748bb085a0630290b0660e79cb6fdb829850b8dfe96cf9963668f3ee98f202e67f063d5c726aaebfcfc720cebbdd5eb8d5c22ac5aa9f35da4b4e6b20d0ac195f56b3cba640615d9c765608de6607b058e6afdc47e02cf156582083fbed08cde831d2c5af185f07774d7a9b6db03dd7cd04981b17803370d6a64d4b019f55025e353bc228b988b9d4a7590b1664324d1aaee5499e33601e83097087f2d8235914584e1257ce80b2208faa12f6f3eba5bb03cb3ed0ef98406ad0145d0e9633a1bc6f2300dbf1360b41cb9455e8c41d312362fe3a154c6bde6f625e34f35a0d68f457f6fcf7f586a977af726710d6ac57b7cb3ee8b9f17652d8929fae58a81fce93db686f86eb4ca8b0a9b4aa08cf76569f01e1e03d2251b7f4905d6ffbcc9f986203200e406644f82041cfcd4245848f8baab89f523bdea15565edf37ae8aea3f754ee938811045025e0e2a359746e6c530bacc07273f21252ec3f32614666cc49ecdd3639c619fd9fc84ad657e6f1bd1ea6d9029aa3b807ec30fa1acb355e4b9183a854cc28df0697ea9c54630b7181bcdee10ff193f7a11cea5494172b230950f59201bdafee42a9e3c01a89271096d7ebf05e38bc0754831aded616fe3f5f2f22f5e80df8f6dce86dc9fea10cc98b12248c8b0d6e5e7bcf5f714922f8283ebd367b8ce5b31431096aec1e15d976656ef9a75b79e0efd057efba7b0d3135bd66d7d0f18bfe1634b68d85cfa1c158fcd04df09a0963d302d56455b140c509393d7524e2416a8012f9b4ca43ccd9a04008a69ebdef3ba0ecd8df25f2006ef28e2e74085eb4724d1191f59841f986e7979d7b4e7b780e80e05c6c3e2f62e7d714e0debc2260e58682c2b8faa8fdc121e954aaa5bd1fa6bfa023f8cc296f49f9d82c24e43585055277c7a351c8c69884172153ae6e0f6b6eb951d645bd250f14d0e8609a974052e1941772f322fa2edb7be000d1d9e1da9134aaca67cc0791f4f8c8aab1af7697b38ea20da63c8654d5fc63b73e1d683179cd7325a8db8df61f27b04de6b53496182323185a87bd654532dd928009b045d1a73a89f2def639329abdbd1bff1a0a93106ff1f2b17ee8d6e0b13216b1d1143e7114cada9455d563055bf34edc8b3f7f24ce79ba4e856e063c9c3baf4a3ebd48ff8547e9bd9dda329497ff9396b365e5189c5b3646c8acc6ba496d5cb2402ac515b421a3f0ea19457b7305dac556b4a7419a111646eee94e6616c2bef954c29d7b132028e6759d6983fc74a8f61354aeeff1f3c60e7ef3d98572e4b4366153a6a7ddb5a6dca1754c8b6c0ff7268f13bb84aa4479af21937b77dc95311d1b3275447046a5546950eb2568cd371b9ffbd830fcf5a0bfb2f94f13afa1bd5c433e9f9fbf9c187171e4a067801c0c0a46474801b81f8a0bd70f87cbf6a14de8493c37351d77ac71a2d06ea6387f943db99e987b8b0aa48c0606c00a76be0b44bb115f263b4ed819afae47f603b71a14aad7e126deeeb97ba12f607539e88e4c3ad9bb3e743fc2dd36adacc37307b894fd42ee526a6155ff97143fa19e3f4b1d77a3464cf856c633780e5a3d821a5ed8a0566f8b9339f145b2330625c9739fe43939c78ca5ffc2671bf8128bdb3bb50063d4d5973fdd63f5b025dd622a9b329821c43187bf17e5c67d617207f98b3368a8be75389d75f7a053890ce9f6ba8b7f35100407e0d863ec86f8a86c5698b791f2a1c547fd6aff93258b4a4fc00e7a46b25fabfc39b92f0009bcd16b3883e73251a5a667431154df0a05fbc1cb2e8a0b75a4f0a9d7fddcaf1afbd0703c91488e4b3ac04ea800aaa6908e4c5ea71a5986184ac34345e2d6ac1e0b0f98b5385d71ec6e9ff123e17b5e6e85aaabbd41d4825614a5645c77ba4771b04710b3209dc2d2530cde56cec770428be08a55f31168daceea18dc5d404c38c9aeed5eaa3e55181ac3b63efb08452c5eef1b6f98cc3ffceec784466dde471b2548522908402b13a85e8606503e47d51224aeb78a85e3bdbcd46adf199b01cff2ca6561ce21f60e16dcddd2e56ebe73341bcb65563d83937dd4296a3176e1b9a9048fefd18fd233ec519e29071f52c5d56ebf2f15920c54902cd868265175208f1f46c478f49dab613f9dffffc79e03e332545ffcca5895f84d841ce9edf644568167d1c245092f21299aee519cfe429663bd056dae53c0c07f30955d5513f78ba3b52bde25f981e07bc038e6a289a56d1eaf3a7284a0a07c0e5f8d3c52fd331efd2ab7c95c1ac99e266d83d6839147097c4dc20108e6ff09981a5603406a50a12218f9fa20cb07734a752370d9565308d4259b69fee97667310ef51704b7e36454f", 0x1000}], 0x8, &(0x7f0000002a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x8f, 0x0, 0x8, [0x9, 0x101, 0x5, 0x100, 0x4, 0x7, 0x0, 0x8000, 0x2]}, @cipso={0x86, 0x36, 0x1, [{0x7, 0xf, "3070b20eb0a148a318f5130881"}, {0x7, 0x5, "a73523"}, {0x4, 0xb, "cab94e07a9f31cb73b"}, {0x0, 0x11, "58967f6ac3676c8573311b4d64656e"}]}, @ssrr={0x89, 0x1f, 0x6c, [@broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4800}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x9e, 0x3, 0x5, [{@private=0xa010100, 0x1}]}, @end, @generic={0x86, 0xc, "e2d476b2fbd9c6da2d86"}, @generic={0x83, 0xe, "97ff0d5fc3b8ad7d8fa4220c"}, @rr={0x7, 0xb, 0x27, [@loopback, @loopback]}, @end]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x58, 0x0, 0x1, [0x2, 0x3, 0xa9]}, @timestamp_addr={0x44, 0x34, 0xd5, 0x1, 0x6, [{@multicast2, 0x401}, {@loopback, 0x8}, {@multicast1, 0x7ff}, {@multicast2, 0x200}, {@private=0xa010102, 0x1}, {@broadcast, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0x5c, 0x3, 0x9, [{@empty, 0x20}, {@broadcast, 0x7}, {@multicast2, 0x81}, {@multicast2, 0x8}]}, @ssrr={0x89, 0x17, 0xcd, [@multicast1, @local, @loopback, @empty, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x24, 0x94, 0x1, 0x3, [{@rand_addr=0x64010102, 0x800}, {@private=0xa010100, 0xffffffff}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xc0}]}]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x10, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @multicast2, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x11, 0x3, 0x9, [{@private=0xa010102, 0xee}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x9}, {@multicast1, 0x9}, {@multicast2, 0x3a0}, {@local, 0x1}, {@multicast2, 0x7}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@local, 0x9}, {@empty, 0x5}]}]}}}], 0x290}, 0x4000000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002dc0)='ethtool\x00') ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000002ec0)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000040}, 0x4) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000001380)=0xe8) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001100)="7cc6aa9ff3d0bacc32c053c0ca8b7757ebd25a0a2bf7b18258a6ca71ad9502816e54b8c075bf99ce68b42e15d55afe2922b72e426cb51005d1cb5d31a0abb2e9c253f18ab9d2fbcc21e576a21d71539393cb3a477c938c1a4042a0b3a867c64202a040487e91d559d9eb3305861d26cd320c4bc297cc5f3f74ba4f6ccf392c08ec67c09db12fb9690652eb37cdd8c1216228cdf3249593e75f9645ab6eaf4255646f952e946ce94d6f455914b476e4a68e1cb0a23dc25958df6ea6c641ad159b91fe0c2d10cfe8f01a0a4fa761870ba4a3f55657", 0xd4}, {&(0x7f0000001200)="8532d256d4eea49048eac12b21f4ce3a677998d237d05ecec8e239385886a99031691f61a2d737d9acf7f8d1072799f501f9048d8586c4d2dfdfe7c3", 0x3c}], 0x2, &(0x7f00000013c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_retopts={{0x98, 0x0, 0x7, {[@noop, @end, @timestamp_addr={0x44, 0x24, 0x98, 0x1, 0xc, [{@rand_addr=0x64010100, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@private=0xa010100, 0x1}, {@broadcast, 0x7fffffff}]}, @timestamp_addr={0x44, 0xc, 0xb7, 0x1, 0x7, [{@multicast1, 0x3}]}, @cipso={0x86, 0x13, 0x1, [{0x5, 0xd, "6b58430d96e1cabe757f19"}]}, @cipso={0x86, 0x37, 0x3, [{0x5, 0x4, "e034"}, {0x6, 0xf, "268d953216af0e8368ff26ce49"}, {0x7, 0xc, "39615edf9808e04e02d8"}, {0x5, 0x7, "8787b6d676"}, {0x2, 0xb, "fa17b0dca2788bdb96"}]}, @generic={0x82, 0xc, "83cae6f77cdd4a77aa80"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x120}, 0x40088c1) 21:43:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3a, 0x2000) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)={0x0, 0x97ae}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x8040, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0x9}) 21:43:34 executing program 2: getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, [], 0x1}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_PMKID={0x14, 0x55, "3a16ba39ee557fee2daeb3daa61877ad"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_BSSID={0xa}]}, 0x4c}}, 0x4054) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x400, 0x70bd28, 0x25cfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048040}, 0xc004) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x18d081, 0x0) r5 = accept4(r1, &(0x7f0000000240)=@ll, &(0x7f00000002c0)=0x80, 0x83c86a97d70afda5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 21:43:34 executing program 4: prctl$PR_GET_THP_DISABLE(0x2a) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) [ 2851.431076] IPVS: length: 4096 != 8 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) [ 2851.483335] IPVS: length: 4096 != 8 21:43:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) 21:43:34 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0xfffffffffffffdc9, &(0x7f0000000040)={0x0, 0x16}}, 0x4040045) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="8789e2c45b327bb4a4c062e63d62d2d9b928deaa3e3281005d1dc318630164714575da6ca392cc744edc0b8efd33aa7c6d7acb060d762e2f219a042718") 21:43:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vmci\x00', 0x2, 0x0) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:34 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x19}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000040)=0x80) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x99, 0xff, 0x3, 0x44, @remote, @remote, 0x7, 0x7, 0x7fffffff, 0xe0000000}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x2f, 0x5, 0x3, 0x1, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @empty}, 0x40, 0x10, 0x5, 0x5}}) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:34 executing program 0: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x0) 21:43:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) getsockname(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x80) 21:43:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x20, 0x10, 0x9, 0xfff8, 0xb5, 0x5, &(0x7f0000000000)="b3d408ca20626128534ca8e2f98b507520f7bed141845b2e456ae918a1581a01befb5a0af6ff29c147734b7da70a588a20727c506dfa3dea45087c267898ed81ed2df1c1805ece3232febc15dc15828ed0485cf811959a8daa055d895a4b503deba7c5912b366f360f63b6f29520df25ebf66c8654f5d5a6bc52df90a92e2a1bf9c1757fc5fbace2cd69a30d009855ce91035a0ca23bf7b260f0ae490ca8e4ad28645604fb685c21c5aede623f2b5385105076f7ad"}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x5, 0xa8, 0x10000, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private1, 0x40, 0x10, 0xbb1f, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@delqdisc={0x220, 0x25, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x2}, {0xfff2, 0xfff1}, {0x6, 0x3}}, [@TCA_STAB={0x1a8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3f, 0x738f, 0x3, 0x0, 0x0, 0xff, 0x4}}, {0xc, 0x2, [0x0, 0x9, 0x5, 0x0]}}, {{0x1c, 0x1, {0x7, 0x1, 0x9, 0x65, 0x1, 0xfff, 0x80000000, 0x3}}, {0xa, 0x2, [0x1, 0x1f, 0x5]}}, {{0x1c, 0x1, {0x1, 0x20, 0x0, 0x3ff, 0x2, 0x7, 0x10001, 0x7}}, {0x12, 0x2, [0x7a2, 0x81, 0x1000, 0x800, 0x9, 0x6, 0xc7d2]}}, {{0x1c, 0x1, {0x3f, 0xe1, 0x6, 0x3, 0x0, 0xb9, 0x2, 0x2}}, {0x8, 0x2, [0xc5, 0xfff]}}, {{0x1c, 0x1, {0xd1, 0x9, 0x6, 0x8, 0x2, 0x80000000, 0x3, 0x5}}, {0xe, 0x2, [0x5, 0x6, 0x51, 0x1, 0x8000]}}, {{0x1c, 0x1, {0xfa, 0x2, 0x1, 0x3f, 0x1, 0x8, 0x1f, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}, {{0x1c, 0x1, {0x6, 0x5, 0xa0, 0x3, 0x1, 0x851, 0x5, 0x8}}, {0x14, 0x2, [0xe529, 0x2, 0x9, 0x91, 0x1, 0x200, 0x80, 0x2]}}, {{0x1c, 0x1, {0x70, 0x2, 0x3da1, 0x55637256, 0x0, 0x5, 0x40, 0x2}}, {0x8, 0x2, [0x0, 0x8000]}}, {{0x1c, 0x1, {0x0, 0x0, 0x556, 0x1, 0x0, 0x73ad9804, 0x3, 0x3}}, {0xa, 0x2, [0x7f, 0x1, 0x7]}}, {{0x1c, 0x1, {0xff, 0x3f, 0x3, 0x6, 0x0, 0xffff, 0x6, 0xa}}, {0x18, 0x2, [0x4, 0x1, 0x6, 0xfe1, 0x7fff, 0x2, 0x7, 0x5, 0x2, 0x0]}}]}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x9, 0x401, 0x5, 0x2, 0xfffffffb, 0x7f, 0x8}}, {0x14, 0x2, [0x0, 0x5, 0x4, 0x100, 0x1, 0x2, 0x205, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x20, 0x7f}}, @qdisc_kind_options=@q_pfifo_fast={0xf, 0x1, 'pfifo_fast\x00'}]}, 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x4008) 21:43:34 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8081, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000080)={0x7, 0x1}) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80, 0x400080) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000100)={0x4, 0x1}) 21:43:34 executing program 0: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x0) 21:43:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) recvfrom(r0, &(0x7f0000000000)=""/19, 0x13, 0x1, 0x0, 0x0) select(0xc, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000100)=@delchain={0x1170, 0x65, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0x0, 0xb}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x6}}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_RATE={0x6, 0x5, {0xbd, 0xfa}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x81}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x8}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x10c4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x7}}, @TCA_ROUTE4_POLICE={0x10a8, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x40, 0xfffffffb, 0x8, 0x7, 0xd0, 0xfffffffb, 0x101, 0x8, 0xff, 0x7, 0x2, 0x7, 0x400, 0xd23, 0x2000, 0x1, 0x8, 0xfffffffa, 0x5a, 0x20, 0x0, 0x4, 0x7fff, 0x200, 0x3, 0x7, 0x6, 0xfffffffb, 0x5, 0x2, 0x8f9b, 0x3ff, 0x8, 0x8, 0x6, 0x800, 0x1000, 0xffffffff, 0x800, 0xffffffff, 0x0, 0xff, 0x1, 0x2, 0x6, 0xfffff051, 0x4b0, 0x1, 0x0, 0x6, 0x7ff, 0x45ee, 0x8, 0x10000, 0x5, 0x2, 0x9, 0x80, 0x1, 0x7, 0x9, 0x8000, 0x3, 0xfffffffd, 0x20, 0x8, 0xb0, 0x9, 0x7, 0x0, 0x0, 0x7, 0x8, 0x8, 0x9, 0xce, 0x101, 0x1, 0x5fdc, 0x6, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x9, 0x40, 0x1f, 0x8, 0x1, 0x0, 0x3f, 0xff, 0x3ff, 0x439, 0x212, 0x81, 0xa5, 0x3c6, 0x6, 0x5, 0x5, 0x2, 0x7f, 0x800, 0xffffff0a, 0xc, 0x78aa, 0xffffffff, 0x58de, 0x7ff, 0x1, 0x2, 0x2, 0x8, 0x10000, 0x200, 0x0, 0x8001, 0x101, 0x0, 0x80000001, 0x1, 0x3e3, 0x0, 0x7f, 0x1000, 0x7, 0x8, 0xda4e, 0x4, 0x3f, 0x6, 0x2, 0x2, 0x5, 0x2, 0x6, 0x3ff, 0x6, 0xa0ef, 0x9aec, 0x1, 0x2, 0xcd, 0x3, 0x80000000, 0x5, 0xfffffff7, 0x401, 0x4, 0x4, 0x3, 0xffff, 0x9, 0x4, 0x6, 0x1, 0xfc9, 0x2, 0x3f, 0x80, 0x1, 0x3, 0x2, 0x2570, 0xc83, 0x3, 0x100000, 0x0, 0xffff, 0xffffffc1, 0x1f, 0x3, 0xffffffff, 0x0, 0xa42, 0x3, 0x1000, 0x6, 0x2, 0x8, 0xfff, 0x1, 0x573, 0x0, 0x40, 0x2, 0x0, 0x40, 0xffffff2c, 0xff, 0x2, 0x491e, 0x6f, 0x6, 0xe1c, 0x5, 0x6, 0x5, 0x3ff, 0x3ff, 0x8211, 0x0, 0x0, 0x8001, 0x9, 0x2, 0x1, 0xffffffff, 0x9, 0x1ff, 0xfffffc01, 0x2, 0x1f, 0x6, 0x1f, 0xc0, 0x800000, 0x7, 0x2e9c, 0x6b4, 0x864d, 0x1, 0x80000000, 0x4f, 0x3, 0x7fffffff, 0x7, 0x80000000, 0x25c000, 0x58, 0x2, 0x3f, 0x3, 0x10001, 0x3f, 0x3, 0x4, 0x9, 0xdb70, 0x3f, 0x9, 0xffff, 0x5, 0x5, 0x7, 0x7fff, 0xca8, 0x5, 0x101, 0x101, 0x101, 0x401, 0x9, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x101, 0x2, 0x1, 0x9, 0x9, 0x0, 0x8, 0x0, 0x3, 0x9, 0x0, 0x3, 0x4, 0x1, 0x6, 0xcb, 0x1f, 0x6, 0xa336, 0x8, 0xfffffffc, 0x3, 0x1f, 0x30, 0x2a2a, 0x0, 0x9, 0xc8e2, 0x4a100617, 0x3, 0x31179a18, 0x5, 0x8, 0x6, 0x0, 0x5, 0x0, 0x10001, 0xa6e, 0x54, 0x3, 0xfffffffd, 0x5, 0x7, 0x3, 0x7, 0x2, 0x4, 0x3, 0xffff, 0x9, 0xfffffeff, 0x6, 0x3, 0x8001, 0x5, 0x4, 0x0, 0x1000, 0xfffffc00, 0x0, 0x6, 0x4, 0x0, 0x10000, 0x6, 0x1b15, 0x2, 0x101, 0xfffffffa, 0x401, 0x7, 0xfffffffb, 0x6, 0x3, 0x1, 0x81, 0x80, 0x4, 0x100, 0x10001, 0x0, 0x9, 0x7, 0x8, 0x800, 0x6, 0x182, 0x7, 0x2, 0x2, 0x9, 0x1ff, 0xffff, 0x1, 0x3, 0x5, 0x1, 0x1, 0x3, 0x4, 0x4, 0xff, 0x80, 0x3, 0x964d, 0x2a, 0xfff, 0xffffffe0, 0x6, 0x28d, 0xffffffff, 0x1, 0xc8a1, 0x1000, 0x8, 0xf, 0x5, 0x0, 0x4, 0x5f, 0x0, 0x2, 0x20abe7f9, 0x9b2, 0x3, 0x40, 0x80, 0x5, 0xff, 0x3, 0x9, 0xa86dd8d, 0x1f, 0x0, 0x1000, 0x2, 0x1, 0x8001, 0x0, 0x4, 0x8, 0x20, 0x77, 0x6, 0x7fffffff, 0x7, 0x3, 0xfff, 0x401, 0x6c721b8d, 0x0, 0xffffffff, 0x9, 0x7, 0x2, 0xffffffff, 0x6, 0x5, 0x3, 0x4c1, 0x400, 0x3, 0x8, 0x6, 0x2, 0x3ff, 0x0, 0x6, 0x6, 0x7fffffff, 0x2, 0x1, 0x7, 0x5, 0x4, 0x8, 0x2, 0x5, 0x7fffffff, 0x40, 0x3, 0x9, 0x3d, 0x89, 0xfffffc00, 0x5, 0x1f, 0xfffffff7, 0x250, 0x10000, 0x0, 0x10000, 0x5, 0x3, 0x1ff, 0xfff, 0x0, 0x800, 0x1, 0x0, 0xff, 0x8, 0xe8c, 0x4, 0x8, 0x0, 0x6, 0x0, 0x2fbf4000, 0x59d9, 0x0, 0x5, 0x1, 0x9b, 0x4, 0x227f6d2b, 0xfffffffc, 0x3, 0x80000001, 0x7fff, 0x1f, 0xfffffffd, 0xfff, 0x4, 0x1, 0x3, 0x8, 0x9, 0xfffffe00, 0x340e, 0x3f, 0x0, 0x8, 0x7, 0x1, 0x6d, 0x3, 0x2, 0x80000001, 0x0, 0xb6, 0x5, 0xf8000000, 0x2d, 0x3acd, 0x2, 0x6, 0x9, 0x5, 0x2, 0x29c, 0x9, 0x0, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x20000000, 0xffffffeb, 0x5, 0xffffff01, {0x7, 0x3, 0x9, 0x50f, 0x400, 0x5}, {0x3, 0x0, 0x6, 0x3000, 0xa9}, 0x7fffffff, 0x400, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10000, 0x6, 0x8, 0x80, 0x1, 0x3, 0x9, 0x6, 0x7, 0x0, 0x9059, 0x3, 0x1ff, 0xa6, 0x12, 0x4, 0x10000, 0x1, 0x0, 0xf6d3, 0x7fff, 0x4, 0x5, 0x0, 0x2, 0x40, 0x3, 0xc57f, 0x3f, 0xfff, 0xfc9a, 0x1, 0x80000000, 0x80000000, 0x5, 0x8000, 0x9, 0x81, 0xfffffffc, 0x7, 0x8000, 0x1, 0x4, 0x0, 0x3, 0x1, 0x10001, 0x6, 0xfffffffd, 0x400, 0x8, 0xe6a4, 0xfff, 0x0, 0x7fffffff, 0x7fff, 0xe00, 0x0, 0x64c8, 0x10000, 0x200, 0x1ff, 0x1f, 0x3, 0x1fffc00, 0x8, 0x4, 0x200, 0x1, 0x3000000, 0xa763, 0x7fff, 0x7, 0x7fff, 0x8000, 0x47fe, 0x1, 0x86, 0x7f, 0x5, 0xfff, 0x0, 0x52, 0x800, 0x1000, 0x49, 0x7, 0x8, 0x0, 0x20, 0x4, 0x1, 0x3, 0x4, 0x7da804dc, 0x1, 0xce, 0x20, 0xff, 0x2ba4, 0x8, 0x527, 0x1, 0xe4, 0xff61, 0x100, 0x7fffffff, 0x8, 0x0, 0x9, 0x9, 0x4, 0x973, 0xfa, 0x8001, 0xfff, 0x8000, 0xa4a3, 0x7f, 0x7, 0xfffff7bb, 0x4, 0x101, 0x2, 0x7fffffff, 0xfff, 0xa05, 0xfffffffa, 0x8, 0x10001, 0xfff, 0x4, 0x5, 0x5, 0x80000000, 0xffff, 0x200, 0x4866, 0x8, 0x8000, 0x1, 0x47fde602, 0x347, 0x7fff, 0x3, 0x1f, 0x4, 0x4, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x1, 0xfffffffe, 0x0, 0x4, 0x4, 0x9, 0x2, 0x1af, 0x1, 0xffff, 0x6, 0x80000000, 0x3, 0x7f, 0x8, 0x3ff, 0xc7c6, 0x2, 0x10001, 0x7ff, 0x10001, 0x81, 0x7788, 0x2, 0x2, 0x7fff, 0x7, 0x80, 0xb32, 0x8001, 0x8, 0x5, 0x40, 0x7ff, 0x81, 0x0, 0x1e, 0x0, 0xbcd4, 0x5, 0x1000, 0x1, 0x6, 0x4, 0x2, 0x7, 0x1000, 0x4, 0x4, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x1000, 0x901, 0x1, 0x5, 0x8, 0x101, 0x3ff, 0x910, 0x5, 0x2, 0x0, 0xfffffffd, 0x200, 0x0, 0x1, 0x3, 0x0, 0x1, 0x7, 0x5, 0x7, 0x101, 0x1, 0x7fffffff, 0x6, 0x100, 0xd2e, 0x2, 0xffffff65, 0x1000, 0x800, 0x401, 0x5, 0xff, 0x7ff, 0x80000000, 0x0, 0x6, 0xfffff3d6, 0x0, 0x8, 0x56c6e0db, 0x200, 0x6, 0xff, 0x80]}, @TCA_POLICE_RATE={0x404, 0x2, [0xe0, 0xf8, 0x7fffffff, 0x5, 0xfffffe01, 0x101, 0x40, 0x7, 0xb7, 0x7, 0x8bf9, 0x3, 0x800, 0x7, 0x8, 0x6, 0x8, 0x0, 0x2, 0x800, 0x4, 0x8, 0x2, 0x3, 0xffffffff, 0x80, 0x1, 0x401, 0x7ff, 0x7fffffff, 0x3, 0x7, 0x9, 0x10001, 0x5feb, 0x80000001, 0x10001, 0x4, 0x5, 0x7, 0x6, 0x7f8, 0xb4db, 0xb3, 0x7, 0x100, 0x5c, 0x4, 0x80000001, 0x9, 0x2, 0x7, 0x7, 0x7, 0x4, 0x5, 0x3, 0x8, 0x2ec, 0x9f43, 0x7ff, 0xffff61d9, 0x94, 0x40, 0x5384314b, 0x7, 0x0, 0x9, 0x900000, 0x7, 0x0, 0x8a, 0x1, 0x8, 0xfff, 0x1, 0xdb4a, 0x8000, 0x5, 0x81000000, 0x5, 0x8, 0x1000, 0x11, 0x1, 0x800, 0x1000, 0x10001, 0x9, 0x40000000, 0xffff7fff, 0x1000, 0x200, 0x6, 0xffe00, 0x8, 0x6, 0x770, 0x4, 0x9, 0x5, 0x80, 0xfffffff8, 0x8000, 0xfffffff7, 0x6, 0x0, 0x7, 0x3, 0x3, 0x4, 0x9, 0x80000001, 0x9, 0x170b, 0x400, 0x1, 0x0, 0x37, 0x3, 0x8, 0x9, 0x0, 0x778, 0x9, 0x81, 0x8, 0x9, 0x8, 0x2, 0x8, 0xffff, 0x1, 0x10000000, 0x100, 0x7, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x7ff, 0x8001, 0x0, 0x80000001, 0x1ff, 0xfffffff9, 0xffffffff, 0x7, 0x8, 0x0, 0x9b32, 0x3, 0x7fffffff, 0x58bc0f80, 0x8, 0x1, 0x5, 0x3, 0x6, 0x3, 0x80000000, 0xff, 0x5, 0x6, 0x6, 0x8000, 0x9, 0x2, 0x28, 0xc, 0x9, 0x5, 0xa2a, 0x7, 0x6fb06974, 0x200, 0xf5, 0x8, 0x9, 0x1, 0x46fb, 0x5, 0x5, 0x800, 0x81, 0x342, 0x1, 0x2, 0x4, 0x1f, 0x7fff, 0x5, 0x7fffffff, 0x52ce4bfc, 0x10000, 0xffff, 0x9e, 0x9, 0x8, 0x1, 0xfffffffc, 0x0, 0x730ce387, 0xfff, 0x2, 0x0, 0x6, 0x8, 0x8, 0xd4c, 0x2d, 0x3f, 0x3ff, 0x2, 0x6, 0x1, 0x1000, 0x4, 0xfffffff9, 0x8a, 0x100, 0xff, 0x3, 0x2, 0x0, 0x4, 0x6, 0x3, 0x4, 0x6, 0x3, 0x30000000, 0x9, 0x5, 0x7, 0x9, 0x400, 0x2, 0x5, 0xff, 0xb, 0x0, 0x1, 0x100, 0x800, 0x9e9d, 0x1ff, 0x5, 0xffffff27, 0x5a0, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x6, 0x8, 0x81, {0x4, 0x1, 0xfff, 0x7, 0x7f, 0xe79}, {0x1, 0x0, 0x101, 0x4, 0x5}, 0x17, 0x1, 0xffff}}]}]}}]}, 0x1170}, 0x1, 0x0, 0x0, 0x20000085}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xd0, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4a}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb0, 0x5b, "0de38e7da6b50de7085e7c7332031bc86038b817edb5af7905736ff033338c0b09a71b218e4fa1ee9c6a6845dcb0930c7655f46df49b84890bc2de5c483576b7587e7b7207b3554ccc4b1ab62b05b889c7d87a536b3a9605f08df976507be220a9b833a14dcab1803eabd9712598179710494c2d85fc762090a40c8a4fef9a1216533090feecd6b20214606289178be01860c2e4c322b2700b53c04aef6d7644d011db5d9d8ea3e2e70b1a13"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20044041}, 0x80) 21:43:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0xc20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8d9, 0x45}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) read$usbfs(r1, &(0x7f0000000080)=""/97, 0x61) 21:43:35 executing program 0: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x0) 21:43:35 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa87, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0xb}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc880}, 0x8000) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:35 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x4000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x531003, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) 21:43:35 executing program 5: select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80) 21:43:35 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:35 executing program 4: r0 = socket(0x18, 0x800, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008a80)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000008b40)={&(0x7f0000008a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000008b00)={&(0x7f0000008ac0)={0x20, r1, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3}}}}, [""]}, 0x20}}, 0x4080) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x3f, 0xf0, 0x176c, 0x10, @dev={0xfe, 0x80, [], 0x18}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x10, 0x80000000, 0xb78}}) sendmsg$nl_route_sched(r3, &(0x7f0000008940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000008900)={&(0x7f0000000180)=@delchain={0x875c, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {0xf, 0x7}, {0x3, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x8c}, @filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x8724, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x8}}, @TCA_BASIC_ACT={0xab8, 0x3, [@m_police={0x490, 0x1e, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x6, 0x9, 0x400, {0x9, 0x0, 0x8001, 0x8, 0x1, 0x3}, {0x3, 0x0, 0x800, 0x9, 0x7, 0x4}, 0x5, 0x10001, 0x13f0}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x27, 0x7, 0x1ff, 0x0, 0x3, 0x10001, 0x4, 0x0, 0x100, 0x7, 0x7fff, 0x0, 0x33, 0x1f, 0xd8600, 0x5, 0xca33, 0x101, 0x1, 0x3ff, 0x5, 0x3, 0xffffffff, 0xb6f, 0x81, 0x4, 0x8ef, 0x5, 0xfffffffc, 0xf0cdc9, 0x2, 0x6, 0x4, 0x8, 0xffff, 0x5, 0x3bbb8000, 0x401, 0x530, 0xff, 0x7, 0x86df, 0x1, 0x20000000, 0x4, 0x6c1, 0x6, 0x6, 0x3, 0x2, 0xffffffff, 0x0, 0x6, 0x1f, 0x4, 0x5, 0x81, 0xffffff8f, 0xc11c, 0x8, 0x3, 0x2, 0x7bb, 0xb6, 0x400, 0x5, 0x6, 0xb592, 0xff, 0x7, 0x3, 0x4, 0x9ad7, 0x1, 0x2, 0x2, 0x3, 0x1, 0x3, 0x101, 0x4, 0x10001, 0x2, 0x6, 0x400, 0x1000, 0x1ff, 0x2, 0x1000, 0x81, 0xffff, 0x1, 0xcd9, 0x9, 0x30d, 0x9099, 0x0, 0x8001, 0x80, 0x0, 0xffff, 0xd, 0x5f, 0x6, 0x101, 0x7, 0x8, 0x81, 0x732a, 0x3, 0x80000000, 0x7, 0x10000, 0x33c00722, 0xfffffffe, 0x3, 0x6, 0x0, 0x2, 0x0, 0x4, 0x2, 0x1, 0xfffffffa, 0xffffffff, 0xbc61, 0x800, 0x40, 0x8, 0x200, 0x9, 0x0, 0x0, 0x400, 0x0, 0x6, 0x5, 0xfc1, 0x9, 0x9, 0xfffffff9, 0x7, 0xfffffffb, 0x9, 0x10001, 0xfffff84e, 0x8, 0x34, 0x6, 0x2, 0x10001, 0xdc45, 0xfffff000, 0x8, 0x2, 0x5, 0x0, 0x400, 0x20, 0x0, 0x4, 0x3, 0x4, 0x2, 0xf4, 0x7, 0x5, 0x8001, 0x9, 0xc93, 0x4, 0x4, 0xfffffff7, 0x7f, 0x5, 0x7, 0x585d, 0x4, 0x40, 0x401, 0x58, 0x4, 0x1c0, 0xf9fb, 0xffffffff, 0xfffff000, 0x5, 0x2, 0x101, 0x7f, 0xf9d, 0x7, 0xcaf, 0x0, 0x9, 0x7fff, 0x540, 0x80000001, 0x3, 0x40, 0x6, 0x400, 0x4, 0x6, 0x5, 0xfffffff6, 0xffffffff, 0x3, 0x96, 0x2, 0x2, 0x8, 0xff, 0x8, 0x0, 0x3, 0x7, 0x3f, 0xfff, 0x9, 0x3, 0x10000, 0xe5, 0x0, 0x8, 0xff, 0x3, 0x3, 0x80000000, 0x67, 0x49b1, 0x7, 0x6, 0x8, 0x100, 0x81, 0x7fffffff, 0x3, 0x3a9, 0x7cd, 0x400, 0x7, 0x2, 0x6, 0x3, 0x7fffffff, 0x7ff, 0x100, 0x100, 0x8eb, 0xc896, 0x9, 0x4, 0x893, 0x2, 0x3]}]]}, {0x15, 0x6, "c9993ef0977e9ac78ec3912b50ed32aab5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0xfc, 0x20, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8, 0x7, 0x5d, 0x1}, 0x1}}]}, {0xaf, 0x6, "4485749b32c535816f0393f468fc19826348cea4a3ad23665696b172758c12c848495c1c51b04bba40ce7e1c140f078a5521d02c2dcfa878e595575c4c06d4e635f91bc5bbc506ff0e0eb07fdae8637b0bd5bf26baedd0465185b158f762825fb29ab51e9d7b9d1baa2eef187c28849950e1e6b5a02d632c2c84ebd526940d7d15e3e51c7c4b71f19e94d7141cab6ddf39debbb47fb6dce13e963f079aaab8df105ff1363f4f9aaae8017e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x84, 0x4, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x5, 0xffffffffffffffff, 0x10000, 0xa5b8bde0}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8000}]}, {0x2f, 0x6, "c429aba8ff3d082d0ee1d0cbbf2e5a3affba832c13d034904fae71bb01b709705afa73619621052110a258"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x7c, 0x7, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x60}, @TCA_MPLS_LABEL={0x8, 0x5, 0xca03e}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}]}, {0x2e, 0x6, "01a1df868ee283ad18ef9b08617136bdb72ba9ac9c502e97633dca8f9de3fff72dd7cd4f0648cd69527b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x100, 0x3, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0xb3, 0x6, "9f351f56fa11c2c517ec6b0fbef3db15c2e8d0a4509d56ba64c0ec91ce21f2ec1b221f06a7c0d600df4f144457db725d450f8caae2c433215338a9761a9dca0e867abbd61c9893e9e0c568f4d29f7c22bba2f6c95ebd72362672dbd620407f8441b32a10b08f0668cae62923c55a2e1c5e060408b05a0493b2b1f615d780ad3a5e9c12d705bc6783705103a35deb8cf5b7e3b5beeb59694b3f3c93073171312c8015a96d39130de1f54fcee6905e3d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x94, 0xc, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x3d, 0x6, "8f0b3d850151a030aefa2d64cf358557adf06cc2b0deec8e9d28206bf8c448b4192b7dfbffd052ac0fc8f98f84153c762130f5493100d7727f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xf8, 0x10, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffff7, 0x7, 0xffffffff, 0x4}, 0xd8b6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x2, 0x7, 0xffffff81, 0x3ff}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0xfffffff7, 0x1, 0x2d0ed7b4, 0x2}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdc0, 0x10000, 0x3, 0xd0, 0xfdb}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x10000005, 0x6, 0x6}, 0x4}}]}, {0x3a, 0x6, "2a954a315614661fc415a1eda62df56370952a6ef5d5ea134fc68875dffc4e49bceae259cc2bd77ef7dddc55044f5369935eda6111e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xfc, 0x19, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x2f, 0xffffffffffffffff, 0x5, 0x1ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x546}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x8d, 0x6, "21b203eab296a9c2611403f55c176c339df9927197b870db101de0cb8e5fccb7839751bddc33bdbdf7d3fc05880793f4ff725a45ed95e0da60b6f40107db13bae6c9aeebd38270c009bc713a70489097c7381475bef6e27c12f55b0487b02ab43cf80e8bd7330b728b2bb9c6cce92d8c7f05bae2bc7cdf2ef634fd4e96f82d10e66892c09896d212eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0xa0, 0x1c, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x8, 0x0, 0x1000, 0x7}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0xe394, 0x2, 0x7, 0x9}, @multicast1, @local, 0xffffffff, 0x1}}]}, {0x28, 0x6, "f597e771c71a6ff8cfd714705b9c9e35a67668c532dc4ae407680ab862dfc7dbc4b5654e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_POLICE={0xd20, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7f, 0x2, 0xbbb, 0x80, 0xc7, 0xff, 0x40, 0x3, 0xad, 0x7, 0x1, 0x0, 0xb43, 0x4, 0x2, 0x3, 0x4, 0x1, 0x4, 0x3, 0x0, 0x3f, 0x80, 0x8, 0x10001, 0xd5, 0xb2, 0x8, 0x6, 0x100, 0xffff0001, 0x401, 0xe97e, 0x8, 0x9, 0x8, 0xdc99, 0x4, 0x3, 0xa39, 0x5, 0x200, 0x4, 0x6, 0x9, 0xef0d, 0x81, 0x3, 0x4, 0x3f, 0x1000000, 0x5, 0x7f, 0x3, 0x6e8, 0x2, 0x80000001, 0x4, 0x7, 0x5, 0xd08, 0x1, 0x0, 0x3, 0x8, 0x3, 0xce0, 0xff, 0xfffffffb, 0x3, 0x7, 0xffff, 0x7, 0x0, 0x4, 0x1, 0x908, 0x2, 0x4, 0x100, 0x0, 0x2, 0x1, 0xff, 0x3ff, 0x0, 0x2, 0x777c, 0x4, 0x401, 0x9, 0x1, 0x0, 0x9, 0x7, 0xe4, 0xffffff24, 0x3ff, 0x80000001, 0x0, 0x4, 0x5, 0x6, 0x9, 0x6, 0x0, 0xffffffff, 0x8, 0x101, 0x60000000, 0x8, 0x1ff, 0xfff, 0x4, 0x2, 0x3, 0x9, 0x1, 0x400, 0x6cac, 0x7fff, 0x10001, 0x9, 0x20, 0x3, 0x1, 0x2, 0x6, 0xfffffffe, 0x1ba8, 0x1000, 0xc0e5, 0x7, 0x5, 0x0, 0x1, 0x8, 0x8, 0x80000001, 0x3ff, 0x8, 0x401, 0x1, 0xffff, 0x5c, 0x8, 0x100, 0x1f, 0xf7c4, 0x4, 0x2, 0x0, 0x1, 0x7ff, 0x3ff, 0x400, 0x81, 0x7, 0x3f, 0x7, 0x6, 0xfffff0c2, 0x8, 0x6bc00000, 0xff, 0x0, 0x3c7b, 0x0, 0x7fffffff, 0x60f, 0xa6e, 0x6ba9, 0x10001, 0x7, 0x1d20, 0x1, 0xf4, 0x4, 0x1c, 0xa5, 0x5, 0x7fff, 0x1, 0x1000, 0xdc6, 0x5, 0x80, 0x8, 0x0, 0x40, 0x1, 0x4, 0x7ff, 0xd4, 0x9, 0x1f, 0x4, 0x6, 0x4, 0x7, 0x6c6ba225, 0xff, 0x3, 0xf4f6, 0x8, 0x254, 0x101, 0x2, 0x55, 0x2, 0x6, 0x7, 0xffff543b, 0x0, 0x8, 0x1, 0x26f, 0x2, 0xffffff00, 0x2404, 0xdf, 0xdf, 0x6, 0x1000, 0x9, 0x800, 0x6, 0x81, 0x8, 0x337, 0x8, 0x4, 0x101, 0x7f6, 0x3d, 0x81, 0x3f, 0x9, 0x2, 0x5, 0xfffffff9, 0x22, 0xe5b5, 0x680c, 0x7, 0x5, 0xba6b, 0x4, 0x8000, 0x8, 0x7f, 0x0, 0x7, 0x8001, 0x1ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x3, 0x77, 0x9, 0x4, {0xf7, 0x1, 0x9, 0x100, 0x4, 0x6}, {0x6, 0x0, 0x2, 0x6, 0x4, 0x10000}, 0x4, 0x7, 0xe9f2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x0, 0x100, 0xe0, {0x7, 0x1, 0x8, 0x2, 0x9, 0x645}, {0x4, 0x2, 0x1000, 0x1, 0x9, 0x2}, 0x3ff, 0x20, 0x1f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x2, 0x3, 0x1f, 0x60f9, {0x9, 0x0, 0xff, 0x5, 0x5, 0x3ff}, {0x3, 0x1, 0x400, 0x100, 0x8000, 0x401}, 0xcc5, 0x4, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x3, 0x7, 0x8, {0x9, 0x2, 0xffff, 0x8, 0x5, 0x800}, {0x1, 0x2, 0x0, 0x81, 0x7, 0x2}, 0x800, 0x7ff, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x80000000, 0x6, 0x1, 0x0, 0x5, 0x6, 0x6, 0x800, 0x8, 0x8, 0x4, 0x2, 0x1000, 0x8, 0x1, 0x80000001, 0x7, 0x8001, 0xfff, 0x1000, 0x3, 0x5, 0x0, 0x6, 0x8, 0xfc, 0xffff, 0x3f, 0x7, 0x5, 0x5, 0x1, 0x0, 0x400, 0x0, 0x1, 0x9, 0x5, 0x1, 0x1, 0x4, 0x7f, 0xb6, 0x2, 0x8001, 0xffff, 0x3, 0x2, 0x7, 0x9, 0x9, 0x1000, 0x200, 0x7, 0x4, 0x3, 0x3, 0xfffffff7, 0x1, 0x5, 0x1, 0x4, 0x5, 0x7, 0x9, 0x7, 0x1, 0x7, 0xffff, 0x7fff, 0xff, 0x1, 0x40, 0xfffffd60, 0x4, 0x5, 0x81, 0xfffff1b8, 0x0, 0x100, 0x3, 0x7fffffff, 0x9fc7, 0xefe, 0x7, 0x2, 0x57, 0x3ff, 0xffff8000, 0x5, 0x5d, 0x4, 0x8, 0x7, 0x2, 0x7f, 0x6, 0x5, 0x8001, 0xff, 0x7, 0x10000, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0xfff, 0xffffffff, 0x7f, 0x0, 0x6, 0x89, 0x5, 0x0, 0x8, 0x2, 0x6, 0x0, 0x3, 0x1, 0x2, 0x1ff, 0x8000, 0x7, 0x963, 0xffffff81, 0x7, 0x2, 0x4, 0xfff, 0x6, 0x5, 0x2, 0x5, 0x4, 0x3, 0x694, 0x8000, 0xff, 0x2, 0x6, 0xe6ba, 0x101, 0xe970, 0x3, 0x100, 0xfffffffa, 0x7ff, 0x5, 0x2e330f29, 0x80, 0x5, 0x401, 0xfffffffd, 0x3, 0x6, 0x4, 0x2, 0x100020, 0xfffffc00, 0x22194a0a, 0x401, 0x9, 0x9, 0x4, 0x0, 0x20, 0x2, 0x3ff, 0x1, 0x9, 0x2d2b, 0x0, 0x0, 0x6ff, 0xffffffff, 0xffff7fff, 0x1f, 0x4, 0x0, 0x5, 0x0, 0x3, 0x7fff, 0x6, 0x2, 0x5000000, 0x9, 0xea, 0x3, 0x2, 0x7fff, 0x0, 0x5a, 0x4ea2, 0x9, 0x9, 0xffff7fff, 0x3, 0x9, 0x808000, 0x7, 0x8001, 0x5, 0x3ff, 0x80, 0x6, 0x0, 0x4, 0x10000, 0x4, 0x1, 0x4, 0x3, 0x9, 0x7b7, 0x0, 0x2, 0x7, 0x2, 0x9, 0xfffffff8, 0x1ff, 0x1, 0x7, 0x7, 0x2118186f, 0x10001, 0x4, 0x0, 0x0, 0xa4ca, 0x7f, 0x6, 0x929, 0x1, 0x8000, 0x100, 0xa4dc, 0xc763, 0x8, 0x7ff, 0x26ca, 0x6, 0x80, 0x3, 0x8, 0x3, 0x100, 0x7, 0x80000001, 0x9, 0x7, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x6, 0x6, 0x5, 0x9, 0x10000, 0x9f5a, 0x4, 0x7ff, 0x94, 0x5, 0x6, 0x3, 0xc31b, 0x5, 0x14, 0x0, 0x0, 0x1ff, 0x6, 0x8, 0xfffffff8, 0x9, 0x6, 0x1ff, 0x400, 0x1, 0x7, 0x5, 0x2, 0x800, 0x0, 0x0, 0x1000, 0x7, 0x10000, 0x81, 0x5, 0x100, 0x8, 0x3, 0x3, 0x8, 0x3, 0x40, 0x5, 0x7, 0x401, 0x1, 0x9, 0x6, 0x400, 0x7, 0x70a, 0x7, 0x2, 0x8, 0x4, 0x8, 0x5, 0x1, 0x2, 0x41, 0x1, 0x80000001, 0x200, 0x4, 0x3c0, 0x78f, 0x7fff, 0x100, 0x400, 0x0, 0x1, 0x1fe, 0x0, 0x7fffffff, 0x1, 0x7, 0x2, 0x30, 0x3, 0x80000001, 0x52d, 0x6, 0x0, 0x6c15, 0x1, 0x1000, 0x1, 0x0, 0x6a, 0x96e3, 0x1, 0x7, 0x28c, 0x0, 0x5, 0x3, 0x81, 0x1, 0x2, 0x8, 0x0, 0x9, 0x14000000, 0x7, 0x5, 0xc8, 0x7fffffff, 0x4, 0x2, 0x400, 0xfffffffe, 0x81, 0x1, 0x9, 0xfb7, 0x6, 0x8, 0x5, 0x5, 0x8, 0x6, 0x8e36, 0x7, 0x7, 0x1a, 0x4, 0x6e7d8af9, 0x9, 0x2, 0x7fffffff, 0xfffffa79, 0x5, 0x0, 0x7, 0x190c0000, 0x5, 0x400, 0x3, 0x4, 0x0, 0x80000001, 0xe5b2, 0x0, 0x200000, 0xfffff6ab, 0x8, 0x8, 0x101, 0x0, 0x8, 0x6, 0x3ff, 0x3, 0xc19, 0x6, 0xa7a, 0x7, 0x5, 0x7fffffff, 0x0, 0x0, 0x2, 0x80, 0xad, 0x3, 0xfffffff8, 0xe4, 0x800, 0x6, 0x5, 0x1ff, 0x2, 0x200, 0x3ff, 0x5, 0x8, 0x3487, 0x1, 0x20, 0x2e, 0x9, 0x2, 0x2, 0x8001, 0x10001, 0x1, 0xffffffff, 0x7, 0x3, 0x7, 0x95b3, 0x6, 0x1, 0x5, 0x2, 0x3, 0x6, 0x1, 0x10000, 0xff, 0x8, 0x80, 0x7f, 0x401, 0x2d80, 0x8, 0x9, 0x3, 0x80, 0x6, 0x1, 0x8001, 0xffffff4b, 0x6, 0x3, 0x5, 0x3, 0x9, 0x2, 0x0, 0xffffffa6, 0x0, 0x89a, 0x800, 0x7, 0x4, 0x2, 0xffffffc1, 0x4, 0x20, 0x6, 0x0, 0x8, 0x100, 0x2b3acdce, 0xfffffffc, 0x1da, 0xc842, 0x7, 0x1ff, 0x8, 0x5, 0x8, 0x5, 0x1, 0x0, 0x2, 0xfffffc01, 0x1f, 0x22, 0x9, 0x1, 0x2]}]}, @TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3376}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2f}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_BASIC_ACT={0x6f14, 0x3, [@m_nat={0x1f0, 0x1f, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x80000000, 0x20000006, 0x1, 0x7f}, @loopback, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x4, 0x7ff, 0xfffffbff}, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xcd, 0x4, 0x0, 0xffffffff}, @empty, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x1, 0x3, 0xfffffff7}, @rand_addr=0x64010100, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x2, 0x10000000, 0x7, 0x181}, @empty, @dev={0xac, 0x14, 0x14, 0x1f}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x101, 0x4, 0x3, 0xf6}, @broadcast, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x2, 0xffffffffffffffff, 0x5, 0x6}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, 0xff000000, 0x1}}]}, {0xad, 0x6, "aed2f30b18dbfe41c4e7895b54bb9dc1230e8e0f1e2b605af94c28f82a15dd5b182f7759972f9dc90ac6262f89952d3054ace491f17f9a6eea9fd2bd0c2d48869ac33f647a86a49c8eb02ef21f9abde14ace4d2370b4416c384d1319143d413aa162fa966a900ffe8ae2cc7a443ba702db22dceb4fb20ce75992fa698631a2189f248a730f80c711e0c7138321810080cc99f0f48d45f44b090175273ffae22dec3fa129414e8b9d95"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x3a60, 0x2, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x3a04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x2, 0x3, 0x6, 0x7076, 0x7}, 0x7, 0xc0, [{0x5, 0x2, 0x80000000, 0x5e, 0x4, 0x6}, {0xa5, 0x7, 0xc1, 0x0, 0x0, 0x5}, {0x5, 0x8, 0x5, 0x81, 0xe6, 0x101}, {0x8, 0x40000000, 0x20, 0x400, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x8, 0x3ff, 0x5}, {0x5, 0x0, 0x2, 0x18, 0x1000, 0xd872}, {0x83, 0x9, 0x800, 0x0, 0x50, 0x9}, {0x7, 0x5, 0x9, 0x20, 0x6, 0x3}]}, [{0x10000, 0x4, 0x40, 0x8000, 0x7, 0x5dc}, {0x2, 0x5, 0x9, 0xdaae, 0x81, 0x5}, {0xdd5, 0x0, 0x2, 0x8, 0x4}, {0x8000, 0x251, 0xfffffff7, 0x3, 0x7, 0x9}, {0x8001, 0x81, 0x7f, 0x6, 0x1}, {0x9, 0x3, 0x0, 0x2043fa8c, 0x100, 0x800}, {0x2, 0xff, 0x6, 0x0, 0x0, 0x2}, {0x7fff, 0x6, 0x7, 0x6, 0x6, 0x8000}, {0x6, 0x8, 0x400, 0xfffffffd, 0x7, 0x9}, {0x6, 0x8, 0x1000, 0x4, 0x900e, 0xffffff80}, {0x5, 0x9, 0x2, 0x80000000, 0x7, 0x8}, {0x4, 0x3, 0xffffffff, 0x1, 0x3f, 0x400}, {0x3, 0x200, 0x8, 0x0, 0x5, 0x4}, {0x6, 0x40, 0x4, 0x6, 0x5, 0x1}, {0x9, 0x2, 0x9, 0x3f, 0x7}, {0x80, 0x7, 0xffffffe0, 0x7, 0x38000000, 0x4}, {0x7f, 0xe3a8, 0x9, 0x400, 0x7, 0x8}, {0x374b, 0x81f4, 0x6, 0x7f, 0x6, 0x7}, {0x7fffffff, 0xe63a, 0x2, 0x5, 0x9, 0xe0cc}, {0x7, 0x8, 0x9e, 0xfffffff7, 0x7, 0x6}, {0x2, 0xd2e7, 0x2, 0xffffffff, 0x4, 0x1000}, {0x7f, 0x1, 0x9, 0x0, 0x7, 0x9}, {0x28000000, 0xd119, 0x0, 0x2, 0x2, 0x38c0000}, {0x0, 0x5, 0x1000, 0x4, 0x8}, {0x1ff, 0x6, 0x4, 0x8, 0x3, 0x5}, {0x0, 0x8, 0xfc0, 0xf809, 0x8a, 0x1}, {0x4, 0x7, 0x57, 0x0, 0x0, 0x8}, {0x4, 0x3ff, 0x7, 0x40, 0x6, 0x1}, {0x80000001, 0x7fff, 0x191, 0x3, 0x3, 0x4}, {0x9, 0x5, 0x57e0d550, 0x1000, 0x2, 0x1}, {0x0, 0x200, 0x100, 0x3, 0x8, 0x40}, {0xe56, 0x0, 0x8, 0x1, 0x4, 0x7}, {0x6, 0x1, 0x1ff, 0x9, 0x0, 0x549}, {0xfff, 0xcf, 0x9, 0x9, 0x10000}, {0x3, 0x1f, 0x0, 0x1f, 0x100}, {0x1, 0x9, 0x5, 0x81, 0xfffffffb, 0x7}, {0x5, 0x10000, 0xf1, 0x81, 0x400, 0x5}, {0x0, 0x6973, 0x36, 0x3, 0x8, 0x7}, {0x8e, 0x4a, 0x81, 0x67, 0x1, 0x1ff}, {0x81, 0x4, 0xfff, 0x1, 0xd3, 0x1}, {0x6, 0x20, 0x40, 0xff, 0x9, 0x5}, {0x7, 0x5d1, 0x2, 0x7fff, 0x7}, {0xffffffff, 0x7, 0x2, 0x65, 0x3ff, 0x200}, {0x2, 0x7, 0x5406, 0x1, 0x7, 0x24}, {0xffffffff, 0x5, 0x7fffffff, 0x2, 0x9}, {0x3, 0x80000000, 0x3926, 0x6, 0x7, 0x4}, {0xfffffffb, 0xffffffff, 0x3, 0x80, 0x0, 0xfffffa15}, {0x5, 0x0, 0x8, 0xffffffff, 0x2, 0xfffffffd}, {0x20, 0x80000001, 0x5, 0x8001, 0x1ff, 0x8}, {0x3ff, 0x7, 0xffff8000, 0xffffffe0, 0x381b, 0x7}, {0x6, 0x101, 0x1, 0x57, 0x0, 0x7}, {0x5fa, 0x2d, 0x1, 0x0, 0x3ff, 0x3}, {0x100, 0x164, 0x8, 0xc0000000, 0x12723bf, 0x5}, {0x7fff, 0x5, 0x80, 0x80000001, 0xff, 0x9}, {0xffffffff, 0x4, 0x3, 0x101, 0x40, 0x8}, {0xfb, 0xa079, 0x3, 0xc652, 0x3, 0x7fffffff}, {0x5, 0xcff0, 0xa206, 0x9c, 0xbc, 0x7}, {0x3f, 0x9, 0x7, 0x9, 0x8}, {0x0, 0xe28, 0x4, 0x0, 0x5, 0xa1}, {0x1, 0x9, 0x2, 0x7, 0x7f, 0xeb}, {0x3, 0x80000000, 0x1, 0x93, 0xb4d, 0x1ff}, {0x200, 0x80, 0x2, 0x7, 0x66b9aaf8, 0x7}, {0x2, 0x8, 0x6, 0xfffffffc, 0x8, 0x7}, {0xd5, 0xffffffe0, 0x5, 0x1, 0x9206, 0x98}, {0x8001, 0x9, 0x101, 0x236e, 0x9, 0x8}, {0x1ff, 0x0, 0x3fd, 0x9, 0x40, 0xff}, {0x8, 0xd71, 0x3ff, 0x100, 0x6, 0x5}, {0x9, 0xffff, 0x2, 0x6, 0x2, 0x4}, {0x4, 0x1f, 0xacd, 0x7, 0x8000}, {0x0, 0x1, 0x400, 0xbcb, 0x3, 0x228}, {0x101, 0x0, 0xff, 0x400, 0x77, 0x10000}, {0x7, 0x81, 0xffff, 0x5, 0x2, 0x4}, {0x8, 0x7f, 0x1, 0x80, 0x7ff, 0x1}, {0xba, 0x100, 0x3f66, 0x8e4, 0x6, 0x6}, {0x80000000, 0xde31, 0x1ff, 0x0, 0xb, 0x9}, {0x8, 0x40, 0x1, 0x9, 0x0, 0x381}, {0x3, 0x1, 0x9, 0x3, 0x4, 0x5}, {0x80, 0x4, 0x7, 0x4, 0xbd66, 0x13}, {0x1, 0xfff, 0x23ef00ff, 0x2, 0x8001, 0x3}, {0x80000000, 0x3ff, 0x3, 0x2, 0x200, 0x100}, {0x5, 0x0, 0x8, 0xa1, 0xe1, 0x400}, {0x800, 0xfffffff9, 0x800, 0x8, 0x7fffffff, 0x3}, {0x200, 0x4, 0x7, 0x4, 0x8, 0x5914}, {0x2, 0x3f, 0x4, 0x800, 0x2, 0xfff}, {0xfff, 0x59, 0xc0000000, 0x7fffffff, 0xb4, 0xfffffffb}, {0xe, 0x9, 0x3, 0x8, 0x8, 0x8001}, {0x8000, 0xffffffff, 0x8, 0x8, 0xff, 0xffff}, {0x4, 0xffff, 0x200, 0xffffffff, 0x80000000, 0x7}, {0x8001, 0xb2c, 0x3, 0x9, 0x7}, {0x2, 0x3, 0x1f, 0x3f, 0x3, 0x8000}, {0x0, 0x7, 0x2, 0xbe, 0xb0bc, 0x80000000}, {0xff, 0x99, 0x3f, 0x290399fd, 0x2, 0x2}, {0x0, 0x80000001, 0x0, 0x7, 0x81, 0x3}, {0x4, 0x3ff, 0x7, 0x5, 0x6, 0x100}, {0x9, 0x1f, 0x8, 0x3, 0x1c1ca2a}, {0x6, 0x2, 0x4, 0x81, 0x8001, 0x9}, {0x4, 0x5, 0x3ff, 0x1, 0x5, 0x5}, {0x9, 0x7f, 0x6, 0x3, 0x0, 0x8}, {0x1, 0xc5f9, 0x8000, 0x4, 0x53fc, 0x5}, {0x8, 0x5, 0x10000, 0x401, 0x64, 0x7ff}, {0x2, 0x5, 0x80000000, 0x9, 0xbe2}, {0x5, 0x5, 0xffff, 0xf21f, 0x7, 0x10001}, {0x3, 0x200, 0x10001, 0x7, 0x5, 0x81}, {0x6b1, 0x1ff, 0x8, 0x0, 0x3ff, 0x1000}, {0x9, 0x4, 0x400, 0x7, 0x4, 0x80000000}, {0xfffffe00, 0x1, 0x8, 0x4, 0x3f, 0x2}, {0x7, 0x2, 0x2, 0x1000, 0x5, 0x7}, {0x7fff, 0x2, 0x1ff, 0x1fc0, 0x2, 0x2}, {0x4, 0x20, 0x40000, 0xd6d, 0x0, 0x7ff}, {0x5, 0x1, 0xc0000, 0x4, 0xb15, 0x9}, {0x100, 0x613, 0x23, 0x4, 0x5, 0xef9}, {0x1, 0x81, 0x2, 0x0, 0x3, 0x7}, {0x6, 0xcef, 0xbc2, 0x734, 0x4, 0x1}, {0x20, 0x4, 0x1, 0x10001, 0x9}, {0xaec, 0x1, 0x6, 0x7, 0x9, 0x8}, {0x2, 0xe8, 0x7, 0x9, 0x7, 0x5}, {0x7, 0x80000001, 0x0, 0x400, 0x56, 0x3}, {0xc17, 0x5, 0x5c5c, 0x9, 0x0, 0x2}, {0x656d, 0x2, 0x28, 0x9, 0x0, 0x10000}, {0x9, 0xfffeffff, 0x1c3b4d16, 0x3, 0x5, 0x2f12}, {0x0, 0x2, 0x8, 0x3, 0xaa6, 0x3}, {0x2, 0x8, 0x5, 0x0, 0x2, 0x70f}, {0x3, 0x0, 0x10001, 0x3, 0x8, 0x2}, {0x1, 0x90, 0x5, 0x101, 0x3}, {0x0, 0x1, 0x5, 0x0, 0x7ff, 0x2}, {0x3, 0x80000001, 0x4, 0xfff, 0x8, 0x8}, {0x91, 0x5, 0x40, 0x4, 0x870, 0x6}, {0x6, 0xca3, 0x8, 0x4, 0x4, 0x2}], [{0x4, 0x1}, {0x1, 0x1}, {}, {0x75bd8c831d3cfa07}, {}, {0x3}, {}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x272d379d9c82e933, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0xa8326df695af6b4b, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x5}, {0x1}, {0x0, 0x1}, {0xc02259155bf40a3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x3101118c1d888d72}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x3}, {}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2}, {0x7}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x7, 0xff, 0x7, 0x6, 0x2}, 0x2, 0x18, [{0x2, 0x101, 0x1, 0x6, 0x0, 0xfff}, {0x3c, 0x4, 0x7, 0x4, 0x4, 0x2}, {0x10000, 0x2, 0x7, 0x7, 0x3f, 0xd135}, {0x400, 0x1f, 0x6, 0x8, 0xfffeffff, 0x2}]}, [{0x1, 0x81, 0xff, 0xdf, 0x46a, 0x789}, {0x100, 0x8, 0x6, 0xfffffffb, 0xff, 0x8001}, {0x86c, 0x2, 0xb4, 0x1, 0xecd}, {0x1, 0x401, 0x8, 0x5, 0x80, 0x2}, {0x1, 0x4, 0x8000, 0x7, 0x81, 0x1f}, {0xf9a, 0x0, 0x4, 0x400, 0x0, 0x1}, {0x9cd, 0xe8a, 0x9, 0x2, 0x9}, {0x5, 0x2, 0x7fff, 0x401, 0x5, 0xad62}, {0x5ed, 0x8, 0x0, 0x2000000, 0x80000000, 0x6}, {0x3, 0xfffffff7, 0x4, 0x9, 0x5, 0xfffffee5}, {0xffffffff, 0x9, 0x5, 0x9, 0x2, 0xffffffff}, {0x5, 0x3, 0x7, 0xf7, 0x3, 0x1}, {0xe84, 0x2, 0x1, 0x0, 0x800, 0x2}, {0x3, 0xffff, 0x80000000}, {0x80, 0x0, 0x8, 0xc4, 0x7, 0x5}, {0x3, 0x8, 0x6, 0x7, 0x100, 0x8}, {0x40, 0x4, 0xffffffff, 0x5, 0x7ff, 0x5}, {0x8, 0x1f, 0x3, 0x9, 0x5, 0x10001}, {0x3ff, 0x7ff, 0x7, 0x8, 0x7, 0x100}, {0x8, 0xffffffff, 0x1f, 0x7, 0x9, 0x9}, {0x1f8, 0x4, 0x7, 0xd6, 0x3, 0x400}, {0x9, 0x3, 0xfffffffe, 0x8001, 0xc6d, 0x400}, {0x2, 0x0, 0x101, 0x10000, 0xffffc36e, 0x8}, {0x5, 0xff, 0x2, 0x44, 0x1, 0x80}, {0x101, 0x8000, 0x7f, 0x1, 0x7, 0x19}, {0x0, 0x0, 0x7e, 0xf6d3, 0x9, 0xb9aa}, {0x1, 0x7, 0x2, 0x5, 0x7f}, {0x80000001, 0x5, 0x3, 0x1, 0xfff, 0x3}, {0x3, 0x0, 0x6d, 0x97bd, 0x40000}, {0xbd, 0x10001, 0x9, 0x3ca5feb6, 0xffff, 0x3ff}, {0x58c, 0x6, 0xda, 0x4, 0x6, 0x7}, {0x200, 0xda07, 0x9, 0x4, 0xfffff4a3, 0x6}, {0x400, 0x7fff, 0x101, 0xa, 0x1ff, 0x3}, {0x2, 0x1, 0x3b40, 0x1, 0x0, 0xfffffffb}, {0x5, 0x0, 0x3, 0x2, 0x0, 0x2}, {0xfffff7ba, 0xd0, 0x3, 0x3, 0x8000, 0x81}, {0x7, 0x4, 0x1, 0x4, 0x2, 0x3}, {0x4, 0x7, 0xfffffffa, 0x1f, 0x401, 0x4c7}, {0x263, 0x2, 0x1, 0x2, 0x3, 0x3f}, {0xffffffff, 0xffff, 0x3b6, 0x8000, 0x6, 0xd8c00000}, {0x0, 0x3, 0x4, 0x7, 0xfffffe01, 0x5}, {0x9, 0x7fffffff, 0x6, 0x2, 0x1000, 0x800}, {0xbaf, 0x80000000, 0x1, 0x401, 0xfab, 0x7}, {0x870e, 0x30, 0x9, 0x9, 0x4, 0x860}, {0x9, 0x0, 0xdb2a, 0x0, 0x7ac1, 0x8}, {0x5, 0x8fa8, 0x1, 0x3, 0x7, 0x94cf}, {0x10001, 0xe1a, 0x7, 0x2, 0x8, 0x6}, {0xfffffff7, 0x4, 0x81, 0x3, 0x1}, {0x3, 0x2, 0x50000000, 0xffff7fff, 0x7, 0x80000000}, {0x80000000, 0x8001, 0x1000, 0x3, 0x7, 0xfffffff7}, {0x7, 0x46, 0x0, 0x3, 0x1000, 0xb7}, {0xec, 0x8, 0x7a0d72b, 0x20, 0x0, 0xafd}, {0x9, 0x7fff, 0x0, 0x4, 0xd06e, 0x867c}, {0x7, 0x8, 0x8f, 0x81bf, 0x6, 0x8000}, {0x7, 0x8, 0x85, 0x0, 0x752, 0x3}, {0x0, 0x2, 0x3, 0x1ff, 0x8, 0x5}, {0x1f, 0x10000, 0xffffffb8, 0x7fff, 0x7, 0x5}, {0x99, 0x80000, 0x2, 0x6, 0x2, 0x5}, {0x2884, 0x9, 0x9000000, 0x800, 0x5, 0x7fff}, {0x1, 0xfffffffd, 0x9, 0x6, 0x81, 0x8a0edb9d}, {0x1, 0x80000001, 0x1ee0000, 0xc57c, 0x1, 0xffffffff}, {0x6, 0x667, 0xe5, 0x77, 0x2, 0x9}, {0x10000, 0x6, 0x8, 0x80, 0x3, 0x3f}, {0x8, 0x2, 0x9, 0xed8, 0x87d9, 0x6}, {0x0, 0x8001, 0x3, 0x400, 0x5, 0x9}, {0x4, 0x17, 0x80000001, 0x6c4, 0x1, 0x4}, {0xf8e, 0xfff, 0x0, 0x7f000, 0x4, 0xcf}, {0x2ef, 0x0, 0xfffffffd, 0x1400000, 0x8}, {0x320, 0x8, 0x1, 0x7, 0x2, 0x8001}, {0x8, 0x1, 0x9, 0x20, 0x200, 0x2}, {0x7f, 0x7, 0x2, 0x20, 0x8, 0x6984522d}, {0x5, 0x2a, 0x9, 0xc7, 0x200, 0x7fffffff}, {0x2, 0x40, 0x6, 0x1c, 0x36c000dd, 0x4}, {0x8, 0x80000000, 0x5, 0x8001, 0x83a2, 0x1}, {0x0, 0x6, 0xbf, 0x2, 0x3}, {0x3, 0x1000, 0x8, 0x40, 0x5bb, 0x8}, {0x95, 0x80000001, 0x447, 0x31e, 0x4, 0x7fff}, {0x7, 0x6, 0x2, 0x3, 0x10001, 0x8}, {0x8, 0x5, 0x101, 0x1000, 0x3, 0x3}, {0x7, 0x2, 0x7, 0x400, 0x0, 0x100}, {0x9, 0x4, 0x10001, 0x1ff, 0xffffffff, 0x3}, {0xb3fb, 0x4, 0x7dd, 0x80c, 0x3a2, 0x7f}, {0x81, 0x101, 0x2, 0x80, 0x3, 0x1}, {0xffff, 0x3, 0x1, 0x10000, 0x1, 0x422c2c4a}, {0x2000, 0x2, 0x5, 0xa7b1, 0x80, 0x1}, {0x7a, 0x9, 0x1, 0xff, 0x1, 0xfff}, {0x5, 0x4, 0x6, 0x1ff, 0xb7, 0x8}, {0x10001, 0x0, 0x10001, 0x1, 0x3, 0x8000}, {0x9, 0x1, 0x80200, 0xffff2397, 0x0, 0x6}, {0x2, 0x7, 0x20, 0xfffffffa, 0x2}, {0x40, 0xba0, 0x800, 0x0, 0x7, 0x4}, {0x2, 0x1, 0x1f, 0x4, 0x1, 0x7}, {0x81, 0x4, 0x4874ff7, 0x1f, 0x3d, 0x5a}, {0x6, 0xef4be13, 0x7ff, 0x59, 0x5f, 0x3}, {0x3, 0xef, 0x4, 0xd6, 0x80, 0xd1}, {0x0, 0x4, 0x3, 0x3, 0x1, 0x3}, {0x10000, 0x23, 0x8, 0x8, 0x7, 0x8e}, {0x4, 0x8000, 0x3, 0x2, 0x1, 0x58}, {0x1, 0x7, 0x0, 0x7ff, 0x1, 0x7}, {0xffffffff, 0x8, 0x3ff, 0x2, 0x101, 0x1}, {0x1f, 0x1, 0x0, 0xbfe, 0x7, 0x8}, {0x9, 0x8, 0x9, 0x0, 0x8001, 0x8}, {0x7, 0x7fffffff, 0x80, 0x3, 0x3f4, 0x5}, {0x10001, 0x8, 0x1ff, 0x5, 0x20, 0x5}, {0x9, 0x6, 0x5731, 0xfffffffb, 0x80000001, 0x40}, {0x72, 0x4, 0x400, 0x3, 0xfffffc88, 0x81}, {0x2713, 0x80000001, 0x3, 0x800, 0x4, 0x9}, {0x0, 0x3, 0x72b, 0x200, 0x101, 0x2}, {0x4, 0x8, 0x4, 0x6c42, 0x6, 0x9}, {0x10001, 0xffff8001, 0x3, 0x3ff, 0x1000, 0x80000001}, {0x7, 0x180000, 0x9, 0x4, 0x2b7bbad7, 0x6}, {0x20, 0x6, 0x0, 0x6, 0x3f, 0x1}, {0x2, 0xfffffff9, 0x3, 0xfffffffc, 0x6e, 0x1ff}, {0x9, 0xff, 0x90, 0xa884, 0x7, 0x800}, {0xf, 0xffffff85, 0x1f, 0x1, 0x0, 0x4}, {0xfffffffb, 0x4, 0xff, 0xff, 0x5, 0x78}, {0x1, 0x6, 0x1, 0x10001, 0x4, 0x100}, {0xcc, 0xcc67, 0x8, 0xba0, 0x6, 0x5}, {0x1, 0x8, 0x101, 0x1000, 0x5, 0x3ff}, {0x1, 0x3ff, 0x800, 0x1, 0x8, 0x5}, {0x2, 0x4, 0x3f, 0xf75, 0x1ff, 0x5}, {0x1f, 0x49, 0x944, 0x2, 0x1, 0x1}, {0x5, 0x4, 0x80000001, 0xffffd00b, 0x3ff, 0xffff}, {0x7, 0x0, 0x0, 0x6, 0x4, 0x1ff}, {0x10000, 0x94, 0xca, 0x80, 0x3, 0x2ba}, {0x0, 0x3, 0x6, 0x80, 0x8, 0xfffffffe}, {0x7, 0x8, 0x4, 0x4, 0x9, 0x6}, {0x7, 0x8, 0x2, 0xe5, 0x5, 0x1}], [{0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0xc7ea240cf76bb4d8}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x3b8da93f758436bc, 0x1}, {}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x69bd0b8ec7c0a268}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x1}, {0x4}, {0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x6, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x5, 0x0, 0x20000000, 0xfb8, 0x1}, 0xa, 0x7f, [{0xc7, 0x6, 0x800, 0x7, 0x5, 0x9f2}, {0x1094, 0x95, 0x10001, 0x4, 0x0, 0x3}, {0x3, 0x917, 0x80, 0x8795, 0x8001, 0xde}]}, [{0x2, 0xdf9, 0x4, 0x200, 0x5, 0x5}, {0x3ff, 0x400, 0x5be3, 0x4, 0x1ec, 0x3ac0}, {0xb47, 0x6, 0x4000000, 0x6, 0xffff, 0xb4f9}, {0x8000, 0x1, 0x1, 0x80000001, 0x8, 0x4}, {0xfffffff7, 0x46, 0x3, 0x4, 0x9, 0x3}, {0x6, 0x59, 0xba4, 0x400, 0x81, 0x5}, {0x3, 0x200, 0x7, 0x7fff, 0x5, 0x8000}, {0x6, 0x1, 0x4, 0x0, 0xfff, 0x4}, {0x3e6, 0x100, 0x9, 0x3, 0xfff, 0x7}, {0x8, 0x3c2, 0x8, 0x47, 0x1, 0x7}, {0x157d0, 0x9, 0x6, 0x9, 0x80, 0x200}, {0x6, 0x0, 0x1, 0xd110, 0x5, 0x9c73}, {0x16, 0x2d, 0x0, 0x80000001, 0x10000, 0x8}, {0x5, 0x4, 0x4, 0x1ff, 0x5, 0x4}, {0xffffffff, 0xfffffffb, 0x0, 0x6360, 0xc63, 0x80000001}, {0xfffffff8, 0x9, 0x0, 0x6, 0xfff, 0x7}, {0x7ff, 0x3, 0x101, 0x0, 0xff, 0x7}, {0x800000, 0x1, 0x800000, 0x8001, 0x4f59, 0x1ff}, {0x1f, 0x9, 0x0, 0x0, 0x7, 0x5}, {0x3ea, 0x40, 0x4, 0x1dcd, 0x7, 0x800}, {0xff, 0x10000, 0x0, 0x0, 0xae, 0x100}, {0x0, 0x6, 0x0, 0xff, 0xa3a}, {0x3c7c, 0x83, 0x1, 0x2, 0xfffffff8, 0x6}, {0x7f, 0x3ff, 0x81, 0x8001, 0x1ff, 0x6090}, {0x7, 0x8000, 0xffffff81, 0x0, 0xffffffe1, 0x8}, {0x0, 0x1, 0x709bc53d, 0x4, 0x757, 0xfffffff8}, {0x8, 0xff0, 0x400, 0x1, 0xffffe140, 0x80000000}, {0x2, 0x3f, 0x9, 0x3f, 0x401, 0x80000001}, {0x0, 0x3, 0x7f, 0x1, 0x0, 0x7}, {0x2, 0x3f, 0x8, 0x1, 0x8001, 0x8}, {0x7, 0x8000000, 0x1f, 0x7, 0x1ff, 0x3}, {0x7fffffff, 0x3f, 0x1fe0000, 0x7, 0x5, 0x18b}, {0x5, 0x80000001, 0x1fe, 0x5, 0x1ff, 0x4}, {0x9, 0x1, 0x7f, 0xf0b, 0x1, 0x5}, {0x5, 0x4, 0x4f, 0x0, 0x8000, 0x2}, {0x9, 0x5, 0x1, 0x4, 0x1cc}, {0xf8, 0x9, 0x1, 0x80000000, 0x9}, {0x5, 0x0, 0x2, 0x3, 0x5, 0xffffffff}, {0x20, 0x19c1, 0x7, 0x3, 0x101, 0x1}, {0x6, 0x9, 0x8001, 0x2, 0x9, 0xc32}, {0x8, 0x100, 0x7ff, 0x4, 0x80000000, 0x4}, {0x6, 0x81, 0x1000, 0x1f, 0x7, 0x7}, {0xfffffffa, 0x3, 0xffff, 0xfd95, 0x5, 0x401}, {0x1ff, 0x5, 0x8, 0xff, 0x8, 0x7}, {0x10001, 0xfffffffe, 0x2, 0x19, 0x0, 0x55c7}, {0xb4, 0x7, 0x52, 0xffffffff, 0x4, 0x1000}, {0x9, 0x1000, 0x1, 0x0, 0x10001, 0x7}, {0x8, 0x1, 0x3ff, 0x0, 0x2, 0x4461a898}, {0x3, 0x9, 0xfffffff9, 0x0, 0x8, 0x7}, {0x9, 0x80000001, 0x1, 0x3, 0x4, 0x7f}, {0x400, 0x5, 0xdb, 0xc21, 0x3f, 0x8}, {0xfff, 0x0, 0x1, 0x3ced53fd, 0x2, 0x183}, {0x3, 0x4, 0x6c, 0x101, 0x20, 0x10001}, {0x8b67, 0x1, 0x4, 0x200, 0xb5b, 0xe94c}, {0xffffff7f, 0x4, 0x40, 0x0, 0x7, 0x9}, {0xe6d, 0x100, 0x4, 0x20, 0x7fffffff, 0x7}, {0x2, 0x89fb, 0x6, 0x8, 0x100, 0x400}, {0x7, 0x8d, 0x1, 0x3, 0x1f, 0x3}, {0x1ff, 0x6, 0x7fffffff, 0xfffffff9, 0xffff7b6e, 0xfff}, {0x0, 0x7f, 0x0, 0x8001, 0x80000000, 0x5}, {0x8001, 0x1, 0x7, 0x7ff, 0x9, 0x1}, {0x6, 0x1, 0x5, 0x6, 0x2, 0x81}, {0x1, 0xfffffffa, 0xffffffff, 0x7, 0x14e, 0x6}, {0x3, 0x9, 0x5, 0x8000, 0x3000, 0x8000}, {0xffffffff, 0x6f01295f, 0x7, 0xcc8, 0x100, 0x6a8}, {0x6, 0x5, 0x3ff, 0x7f, 0xfffffffe, 0x1000}, {0x8, 0xffffffff, 0x8001, 0xff, 0x401, 0x67e}, {0x8, 0x3, 0x1, 0x0, 0x0, 0x9}, {0xff, 0xd45b, 0x0, 0x7fffffff, 0xf49, 0xffffffff}, {0x5, 0x4, 0x1, 0x0, 0x9c89, 0x7fff}, {0x7, 0x8, 0x10000, 0x8, 0x80000001, 0x20}, {0x7f, 0x8001, 0x7fffffff, 0x401, 0x4a, 0x800}, {0x1, 0x8, 0x7b6, 0x2, 0x2, 0x7ff}, {0x2, 0x9, 0x8, 0x4, 0x7, 0x40}, {0x4, 0x2, 0x1, 0x4, 0x28c, 0x800}, {0xfffffffc, 0x6, 0xe2, 0x0, 0x2, 0x730}, {0x7249, 0x590, 0x5a06, 0x4, 0x0, 0x1}, {0x0, 0x8, 0x4, 0x8001, 0x1, 0x118}, {0x4, 0x3, 0x1, 0x165, 0x3, 0x7}, {0x401, 0xab0, 0x800, 0x7fffffff, 0x8, 0xffffff80}, {0x8, 0x1, 0xae5, 0x1, 0x0, 0x43e1}, {0x3, 0x3ff, 0x2, 0x3, 0x2, 0x81}, {0x9, 0x1, 0x1f, 0xc825, 0x8, 0x80}, {0x3, 0x3, 0x5, 0x5, 0x2, 0x5}, {0x2, 0x0, 0x8, 0x8, 0x5, 0x7}, {0x0, 0x5, 0x21, 0xffffffff, 0x8, 0x4}, {0x10001, 0x4, 0x0, 0x2f82, 0x628d}, {0x0, 0xffff5cc9, 0x80, 0x4, 0x8, 0x1}, {0x10000000, 0x5, 0x2, 0x10001, 0x6, 0x800}, {0x0, 0x6, 0x200, 0x5, 0x8, 0x6}, {0x2ef, 0x800, 0x7279, 0x10000, 0x1ff, 0x6766}, {0x3f, 0x6, 0x0, 0x1ebc, 0x3ff, 0x81}, {0xb6, 0x9, 0x5, 0x2, 0x1, 0x9}, {0x4, 0x7, 0x7, 0x8001, 0xffffffff, 0x6}, {0x1, 0x0, 0x6, 0x200, 0x5}, {0x9, 0x6, 0x1, 0x80000001, 0x6, 0x101}, {0x4, 0x3aa, 0x2, 0xfff, 0x1, 0x6}, {0x4, 0x9, 0x2, 0x3, 0x8, 0x4add}, {0x5, 0x101, 0x7ff, 0x0, 0x47c, 0xf3}, {0x0, 0x6, 0x7, 0x79b1, 0x9f, 0x7}, {0x5, 0x4, 0x59, 0xfffffff9, 0x8, 0x7}, {0x5, 0x0, 0x4, 0x80000000, 0x9, 0x1}, {0x10000, 0xca, 0xaacd, 0x1, 0x7f, 0x3}, {0x7, 0x10001, 0x80, 0x998, 0x800, 0x20}, {0x3ff, 0x40, 0x4, 0x80, 0x5, 0x400}, {0x8000, 0x4, 0x1000, 0x7fff, 0x3, 0x101}, {0x2, 0x1e, 0x8, 0x401, 0x3, 0x3ff}, {0x4, 0x1, 0x0, 0x0, 0x2, 0x3}, {0xdfd5, 0x2, 0x5, 0x1, 0xec04, 0x1f}, {0xf429, 0x8, 0x39, 0xfffffff9, 0x3f, 0x9}, {0x8, 0x100, 0x20, 0x40, 0xfffff299, 0x10001}, {0x1, 0xff, 0x6, 0x9, 0x10000, 0x3}, {0x1, 0x5, 0x80000000, 0x0, 0x4, 0x8000}, {0x80000001, 0x42f5, 0xc408, 0xffffffff, 0x2, 0x400}, {0x3, 0x5, 0x6, 0xffffffff, 0x7, 0x800}, {0x0, 0x39, 0x4, 0x1, 0x0, 0x8}, {0x9, 0x1f, 0x0, 0x8, 0xe2, 0x10000}, {0xdc, 0x3, 0x6, 0x3, 0x0, 0x7}, {0x3f, 0xffff, 0x20, 0xffffa2e7, 0x77, 0x4}, {0x6, 0x39b, 0x6, 0x6, 0x9, 0x9}, {0x4, 0x2803, 0x6, 0xfffffff9, 0x7fffffff, 0x34e6}, {0x3, 0x6, 0x81, 0x3, 0xffffffff, 0xc4}, {0x80, 0x800, 0x3, 0x200, 0x36, 0x5c}, {0x80, 0x40, 0x3, 0x8, 0x7fff, 0x4}, {0x6, 0x7ff, 0x2, 0x8, 0x8, 0x2}, {0xfff, 0x4, 0x9, 0x3, 0x8, 0x80000000}, {0x8000, 0x0, 0xc, 0x9, 0x6}, {0x80000000, 0x8, 0x1ff, 0xfffff801, 0x3, 0x408000}], [{0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x58c32e7ed9fa939c}, {0x5, 0x1}, {0x5, 0x824b6beb910afc5e}, {0x4, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x6, 0xd8d93081b7f8d8df}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x5, 0x614ddebeb57557ab}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0xb79d2b2ad112bdd2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x8228c4f7417c6592}, {0x2}, {0x1}, {0x3}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x0, 0x3, 0x10000004, 0x1ff, 0x1}, 0xe, 0x6, [{0x3, 0x45, 0x3, 0xffffffff, 0x6, 0x8}]}, [{0x2c0, 0xcd38, 0x8000, 0x6, 0x8fb2, 0x1000}, {0x7, 0xc9ae, 0x4, 0x3ff, 0x5, 0x6}, {0xffffffff, 0xffffffff, 0x7, 0x0, 0x9, 0xc249}, {0x8, 0x1, 0x8, 0xfff, 0x5, 0x7}, {0x40, 0x200, 0xb0d9, 0x3ff, 0x9, 0x1}, {0xb4, 0x1000, 0x7, 0xf58, 0x6, 0xffff}, {0x40, 0x1, 0x0, 0x100, 0x7fff, 0xfad6}, {0x7, 0x8, 0x4, 0x20, 0x1, 0x3}, {0x0, 0x5, 0x0, 0x3f3, 0x1000, 0x8001}, {0x2, 0x3ff, 0x7fffffff, 0x6, 0x0, 0x3}, {0xff, 0x6, 0x5a, 0x9, 0xc3ce, 0x4}, {0x2000, 0x80, 0x101, 0x2, 0x7, 0x5}, {0x6, 0x0, 0x6, 0x800, 0x10000, 0x3ff}, {0x6, 0xffffffff, 0x9, 0x9, 0xfffff38a, 0x3}, {0x7f, 0x1f, 0x0, 0x6, 0xfff, 0x80}, {0xc4d, 0x8, 0x101, 0x5, 0x800, 0x4}, {0x80, 0x0, 0x5, 0x9, 0x5, 0x1}, {0x9, 0x7, 0x3f, 0x2, 0xfffffff8, 0x8}, {0x8, 0x3000, 0x3, 0x8001, 0x3, 0x4}, {0xffffff80, 0x2, 0x6, 0xffffff01, 0x3ff, 0x101}, {0x7, 0x6, 0x0, 0x7fff, 0x4, 0x264}, {0x5aad, 0x89, 0xfffffffd, 0x3, 0x10000, 0x1}, {0x41, 0x75, 0xf0d7, 0x204000, 0x5, 0x5}, {0x7fffffff, 0x2, 0x6, 0x9, 0x0, 0x5}, {0x1, 0x67, 0x81, 0x9, 0x200, 0x25d4}, {0x494, 0x8000, 0x6, 0x9, 0x7, 0xfffffff9}, {0x1, 0x400, 0x80, 0x4, 0x6}, {0x3f, 0x4, 0xd, 0x4, 0x8, 0xfe}, {0x401, 0x2, 0x4, 0x5, 0x7, 0x800}, {0x1ff, 0x1, 0x1ff, 0x6, 0x6, 0x4}, {0x9, 0x0, 0x3, 0xc53, 0x7ff, 0x8}, {0x7, 0xfff, 0x4, 0x0, 0x80000001, 0x1}, {0x7fff, 0x9, 0x6, 0x100, 0x6, 0x1f}, {0x2, 0x8, 0xfffffff9, 0x66, 0x6, 0x1f}, {0x36c, 0x8, 0x7fff, 0x3, 0x1ff, 0x101}, {0x2, 0x71596197, 0x800, 0xad, 0x1000, 0x800}, {0x1f, 0x1, 0xf1e, 0x67b, 0x27d8, 0x9}, {0x8, 0x6, 0x0, 0xff78, 0x4, 0x303f}, {0x20, 0x1000, 0x4, 0x4, 0x200, 0xa6}, {0x35ad, 0xfffff001, 0x0, 0x0, 0x0, 0x7ff}, {0x6, 0x4, 0x80000001, 0x2, 0x9, 0x8}, {0x8, 0x3, 0x9, 0x3, 0x31e, 0x6}, {0x9, 0x8, 0x9, 0x8, 0x6, 0x1}, {0x80000001, 0x7fffffff, 0x4, 0x8001, 0xfffffffb, 0x40}, {0x2, 0x3, 0x80, 0xca7, 0x8, 0x100}, {0xa7d, 0x3, 0x4, 0x40, 0x6, 0x51ca}, {0x2, 0x0, 0x7, 0x1, 0x8, 0x7}, {0xfffffffb, 0x5, 0x0, 0x1, 0x1, 0x8000}, {0x40, 0xfffffffa, 0x3, 0x4, 0x8, 0x1}, {0x20, 0x3, 0x1, 0x6, 0x80000001, 0xffffff81}, {0xffffffff, 0x1, 0x200, 0x1, 0x40, 0x3}, {0x587b, 0x0, 0x1000, 0x35, 0x4, 0x3}, {0x3, 0x400, 0x80000001, 0xec8, 0x9, 0x80000000}, {0xfffffffd, 0x0, 0x7, 0x0, 0x5, 0xffffffff}, {0x9, 0x8000, 0x80000001, 0x4, 0x5, 0x10000}, {0x100, 0x366, 0x9, 0x7f, 0x0, 0x3f}, {0x0, 0x1000, 0x1f, 0x3, 0x4, 0x3}, {0x2, 0xfff, 0xab1, 0x1, 0x1, 0x7}, {0x6, 0x2, 0x4, 0x808, 0x8, 0x6}, {0x3a868, 0x660, 0x9, 0x1, 0xb, 0x832}, {0x8, 0x1, 0xb99, 0x3, 0x5d4, 0x6}, {0x1, 0x3f, 0xaf3c, 0x20, 0x49b, 0x1f}, {0x1, 0x5, 0x80000000, 0x9, 0x3ff}, {0x9, 0x7fffffff, 0x7ff, 0x7, 0x10001, 0xfffffeff}, {0x4, 0x6, 0x1, 0x3, 0x4, 0x9}, {0x7, 0xbc, 0x1ff, 0x1, 0x24b}, {0x1, 0x0, 0x78, 0x400, 0x6, 0x3}, {0x4, 0x7, 0x923e, 0xffff, 0x5, 0x4}, {0x0, 0x80000000, 0x39, 0xfffffffe, 0x8, 0x7fff}, {0x3, 0x2, 0x5, 0xd55, 0x3}, {0xfffffffc, 0x1ff, 0x8, 0x9, 0x8, 0x1}, {0x1, 0x6, 0x8001, 0x8, 0x9, 0x5929}, {0x7, 0x4, 0x10001, 0x9, 0xb8f, 0x6}, {0x7807, 0x80000001, 0x101, 0x7ad, 0x6, 0x2}, {0x6, 0x4, 0x8, 0x4, 0x5, 0x9}, {0x8, 0x7fffffff, 0xffffffc0, 0x3ff80000, 0x4, 0x1}, {0x200, 0x6, 0x1, 0x1, 0x7, 0x5}, {0x26856833, 0x10001, 0x99, 0x8001, 0x24e9}, {0x7fff, 0xf575, 0x2, 0x796, 0x9, 0x2}, {0x5, 0x6, 0x9ce, 0xfffffff9, 0x8, 0x2}, {0x2, 0x7, 0x9, 0x6000, 0x8001, 0x3}, {0xbc, 0x4, 0x1000, 0x59ed, 0x5, 0x8}, {0x3, 0x13e, 0x2, 0x3, 0x2, 0x1000}, {0x8, 0x400, 0x4, 0x55, 0x10000, 0x7}, {0x3, 0x80, 0x9, 0x20, 0x8000, 0x3}, {0x0, 0x80000001, 0x8, 0x1, 0x1}, {0x7fff, 0x3, 0xffff, 0x0, 0x5, 0x100}, {0x0, 0xdf69, 0x1, 0x3, 0x4, 0x20}, {0x20, 0x8, 0x40, 0x79c81ab, 0x2, 0x7}, {0x741c2e6f, 0x4, 0xfffffffd, 0x7, 0x7, 0x5}, {0x9, 0x3, 0x7, 0x3, 0x750e7d47, 0xffffffff}, {0xe73d, 0x100, 0xffffffff, 0x1ff, 0x5, 0x1}, {0x5, 0xb86, 0x7, 0x6, 0x8, 0x7fffffff}, {0x2, 0x28b, 0x1, 0xc1, 0x7, 0xca8d}, {0xff, 0x100, 0xca, 0x10, 0x5, 0x3}, {0x5, 0x75, 0x401, 0x8000, 0x8001, 0x1}, {0x3, 0x80, 0x400, 0x3, 0x6, 0x1f}, {0x1, 0x3ff, 0x40, 0x7, 0x1000, 0x2}, {0x1, 0x8000, 0x1, 0x3, 0x8001, 0x6}, {0x2, 0x0, 0x0, 0x0, 0xd6e, 0x8000}, {0x3, 0x4, 0x8, 0x0, 0x0, 0x4}, {0x1, 0x1, 0x5d, 0xfffffff8, 0x4}, {0x5, 0x4, 0xf7, 0x1, 0x0, 0x59c7}, {0x4, 0x1, 0x1f, 0x3, 0x64, 0x7f}, {0x5, 0x65a2, 0x9, 0x81, 0x5, 0x1}, {0x57, 0x6, 0x377, 0x1, 0x9d, 0x2}, {0x1, 0x6, 0x5, 0x0, 0x80000000, 0x800}, {0x101, 0x7fff, 0x8, 0x4, 0x6, 0x80000000}, {0x7ff, 0x2, 0x3, 0x8768, 0x0, 0x8000}, {0x17, 0x6, 0x62ab9244, 0x12000000, 0x2, 0x2fc}, {0x5, 0x10001, 0x2, 0x10000, 0x485, 0x8}, {0x1, 0x0, 0x4, 0x80, 0xffffab76, 0x9}, {0x81, 0x2, 0x1ff, 0x800, 0x2, 0x2}, {0x9, 0x81, 0x0, 0x5, 0x7, 0x9}, {0x9, 0x80, 0x3, 0xf41a, 0x1, 0x80}, {0x0, 0x1ff, 0x1000, 0x1, 0x8, 0x7}, {0x7, 0x9, 0x7ff, 0x80000000, 0x10001, 0x2}, {0xff, 0x4, 0x6, 0x2, 0x7, 0x8}, {0x6, 0x100, 0x3, 0xa33a, 0x400, 0x7ff}, {0x6, 0x1, 0x7fffffff, 0x26e5, 0x29cb}, {0x0, 0xffffffff, 0x3, 0x9, 0x6, 0x1}, {0x5, 0xfffffffb, 0x80000001, 0x81, 0x2, 0x5e7f5f74}, {0x2593, 0xffffffff, 0x5, 0x0, 0x800, 0x7fff}, {0x7fff, 0x2, 0x9, 0xfffffffa, 0x9, 0x7f9}, {0x9, 0xc69, 0x3, 0x0, 0xc82f, 0x8}, {0x9a, 0x1, 0x1, 0x9, 0x1, 0x800}, {0x3, 0x9, 0x0, 0x1, 0x1f, 0xa83f}, {0x1, 0xfffffffd, 0x3, 0xfffffff7, 0x7, 0x101}], [{0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x2}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}], 0x1}}]}, {0x33, 0x6, "fc0a57abe4806d6711ed455d8ddcf2cad5b2b2f2f61a303953a05dce3cc172b609b6c152e6e8e7aca22012d768ae0a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x1078, 0xa, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x4, 0x7fffffff, 0xffffffc1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x4f8, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x400, 0x0, 0x573d, 0x80000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d0d, 0x8}}]}, {0x1004, 0x6, "d52d942421f9af4ce40fcc857753eeba0ed19e30a0ee94c5d491fa5de8103bab3e081a77e13490eedf5e96e01012685756fc94f30c1e338658144219873fb8af9f37acb6e8b1279e20aa83a5e9c22883f47e4c4bfdf517af2856da8f753eb1ce76726ec76acfeffbfa2ab823697ce386e22d3908fdc25be2fb5db96ac5320448f5214c37c75394b96740f06bc15b387c0495818964775a559e374bd39b821a74d8b675aa8c50b15ec69ea3b1b8f3ac989a3244b70646798b1da9e763c505c0336bfa6eeb4b7282b7bae50de8a6dae95b7e5ea1bde87c0c32b2c02a11956c246bfe13ee6b7131e46893427964bf992aabd56649ba8fa4efdb32524e37ef09e8b7673d41541fca4dbce34f625a9e6aa4bf57344ac417dd2d3f2443eb370b9622e52e39470ebefe009178a251dc7ffcd39405ee386e8577c2ccf11055ae8bd93d22b19df721f008d4b8c4d10ac458bfb999b352d61cf89c3b56e4f050ec2c30213ca3d9a734e40ddc09e96a9391a306764f6a1d48da0fc87ec53778f05bc80ff0d31c424993b9d43ddbc06ebc1ed606572721a0edb09dc80cc4b671979c5042c99f8ef1dadf164069252b50e93dc9b6b354c7781443e64ec367687c5ff698a0da593bba441c20b4517e31c876ab54c19a57f888a16a957f9e944f874d823daf38fcc177d1a40df908fd3f09d2615c4dc3b08af95df6a111b2b5a15eab24585091f69fb5c6f44421f51d173d349cec2d99632dc39a629152535a838f05f5d2ddf54762b803199145f84f9bb742fe0eb6634be51431a10731a98167aa3bad4fb725be1e3873d434d2ee608b073fc2d13e211906a3ab75a15e28eb69eeea0843f74d8fc64876f716a7e92065b076c83f1aea2f0d4209482278d2b19be3c77ba2dfb2b55884942a0f9fb75e24ce59006e306746d0b13655b1ed5a95f00288435e8fb5f75ecd56d562c4662c6f3917805e78c5be1edb3cd7d42ef0917b05e05f7c7b842ac6363f7e13d54abd9220a0c9737b26bd8674c341de7b964ddcea333cde5809907944c068bd293905d440f30fde762c3c924301351b674fa6358bdc6ee476c29b66ffa4e947536f79534510641704e82b28e46ccd3bbead13c7ffa1faa1ad60045e9bafe6d4130a0e409077abcfbc3973a60375ec969d78aa10c6c9d76a3321625fd480a3d3eb993cc3e10ffa477962fb2467f3027824ae21b2d93e2fccb9f6895748f7ca3fee1a0c3bcc488973e8b7a4c4110c8ed543e70d6351e8815f62ff18695450c846230a4a53ecc047787573b8a391f319a1d16ca86f797ce5daab5318e4c7d3265e86a51f67fac7e1031828684935ea4f729d1a4b1dc02643b17fb46997c50f20e5b038d9fc0e978466f3cbef470f114e47929b8136827c68d8634e43ffd0077d161b5657bb98090a42367f2b3066f55d31caeeef776cdc4352a716ba2e6d221876848c7af71fc8a62498ca89137b428a370bbbd8f5b33ca804f15d24e66d008c818d3cdedb3eaaf5bc3c04598dff05446573a85a958d13b45a07b8faeb78a883e69e9bb8b3e22825252ee3ab5bbdcb21b485a03b9b6f05674ad86f02b0eb5c37246e42c65fe7762b5c651d234cf1aa891d93499e9b40c11a67682f1a5cc82b9ed4cd9383c5a64ff737c2aee52d9bf557faf0a471f58e9a10fe9d3391f1166628ec9031f7b0af3c4e23fbc55abb8f3c748486720f0d52020ad851a7efb1c02c00f65bbd80fc9488665e9bafc2aba10e3299b761d3bdc48a396318a82474db3920edfff0c04f8f83ea9940aa1ff53625b96a70b1475944dc6799f72edef9873c572298f65d298eed3abc186534956a44f7466716077fd87e4521a9c290c053f9556081c84df8957caf232baee498a9afde0717da19c80f7a894dc5cc7d9e4d68c36e9f797c9a889df12b86444b3eedadc3ea3645d04390500d9be7ca4aaa00a7137524fef481abd31c6b330498e61cb898f6d2810ac500e217d8bd697cbffbd77f9c27a1892e12ec91d6a0dcd61ed2b4c13b4c77a44a8e7dba2a59240ebaad3fc942942d68520488e189619958f9e419df4d9bb1e4d1eede08071a841ca2b35a7c639f92addc55db76f390f56c01be4e0144de6820d1e416e7c85eb31916fc6a5555a302b5c07e0b02afd7d14cb568f5dbf25aa86039cc755d95ed588ee6c85d833f108f18412125df80c2607713e3d6aef43de3141d4fd29eba7181fdf9a48b2aa77e411216175ce438ed9809a0d1a141e7fb03fed074fe5513726faeb4a027c5fa5e6f96b1d219bcbfcdf1fde393ab998d5c8ef0e876ccf098414172b86105244877b03def0c3675a56571dec5ed8bde1e30fcf4a8bd54d80dc958eb06e7a9392532b05d4870f59e54dd17f77cc4403df24481361742c746998f9bc84ec6559b60d7042b8772b4a3e80e0480cb86cff44ee3cfc9d7576bd3baf9634943551c3e4e8f6111cc471a3b6d253ed10d4d3c770fac3d2eed9e7042de22aa52342d5c23cfd8612dc621db4eaa7743e1b40c536545fa14f7435a8e0aa0e369c2621c91e26b23515810761a99595a47141e223de20ab11f9d6a442cfe3128b2113840e4cc09b1bde0a8a6b530396a332c9f08d624e10952ffd6a050c0fce1110de5daf28f40d8bb538e545f9895bd9164e5da5a9136aba5c8da8e3ab3b3edabea841feacd3184b9b87ed5b18808fe75d6ddfd584c8c5e7e30156d51581e67f63131bf43eb60e67ef58a256d7803bcaef094b5c6b051004c796dc2f94364215bb544e488aedd6cc11cbfb533f3cddddbd9b5fc8940d1a6a747bcd87f508ab359af80729a44194dd85075aa73d707bf924966fced1210cf9a2611ae5ff2f9d7a1fdcce5ccd99fb0366c41da2f47e3bbf9c825e9ef976f467dabbc44db06a7ce86fe8ff4d596f9736266fccc3c186b393b62a67cfbde7d1d082247ef7e22b3dd77eac7799ea0819d5ffcf246ba1f8e2694b4cf864129aa72d28fc5bf8e7e8eed834a29095d2cc8e4be137de2a20098ce2dc775dab5e4e9e839f51f03b2f485ee4c782d425e9aa1c6c4e6ea006eba751365bece5acedf0a1599d70750746cf989fc6f7b692700cbcd71954772528a46b7709603d3012be764e54f6a897b80eb736b6291bc7ac00ec096fd4b877eb910551e3f49ef7e160b6b5caa938ca5cc340e50933aba21d1b782e39753f24d24b6fc911e9c0b51b8751642810ec98281a15faa98310f361345c12de297074cb3d010ce1dc10d23bf1e21e74eae0820c8d77e83478e7b844f6f7372041e70e7c415ab4f51855ee8247ac93c39bd68a0f612ce827fb8c3ba496edf2fd569612aec47f1ae843704f0ae4dbecb4d9a628899423879c8e12ba910020c9f99b0a10d38f5d2ce38567c6ea326dcdc026d0bec42e3019090e307bc21083b41496b3a9c0c4fcc026a9b6a24684bc1632e2b17fe9fe228259dffb326d790c8f5427ebd81add62cb69b77528e090a1dcc473598334e6b57c45570f5634204a3b773a3c921113e7cd7503cec4db06bb489718c853a32a7bc3fa25f34bdb09ac524da804414adcaa9e52e919306ad3036b2f905a54b6b8bac2ec2dee0f7b29ff30bcda67c41863e4f503f4df7bf8714913b9aa5904bb1d52bc613024abc002bdf3da703e1fbeea6b258384417bb56f516bb2fdc9ec072776e5ad0c41fa30172521ab1e43140a7b6a418e87ba6d5cb1908064183c95424c4e9ee7b6a03de905e842a0c27c9a96c543b009eb1d0c319577fb85cdd8ba7b4077bd15d2d2c1368168943d8cfaa24577b1e64370cdfe63a3f105d8838ea5c50e9c7b6cae33a0aa505abbd5574e5368cc576dcf52440dcd1496357ba010c3c0f9a5a76dfa5d57f56edc8304929d898cb1d981f3a3026d94d2b3d99d77756bea6ff8af504939b86ef77309b7472fa40b0460c7b0efc2d13c7c5349c2c2bf4b10d37c6186198b893d27aa1cbf96c572f9123fc433195df0bde178542755621fc2cfaa9b1e2fbc8b7ce48aa8f862123495c06f36a0f038060c76c878ad033a9ad30fdf64693f365e972d8d9ae0f212ac3766e088df7db16d71818b5d3287a67b3e106603d49f8b1ba1a8d46eb9d49d07c24359207b0898ec3fcb145d2d815489181ead7838f193620328dca84d7ccc550bd5f56cd56bc15518d3152c201416fa13625fe9d1cfac72854196ee6c7e963d6a441984bedcfd4e85863d0f857b8fd7f79c53f3fbd21ce51dfdee9fc085b0e4531e26993cd5c1478a533c9cb9e55151b7bcdad290342ed47e1886c87051113620e7302f5906fb703d2b0da5ec68b719922d86baa7ac12304a38fbb761be9aca1883aed6290b326c19df047e801929fa69be9e751b426f9220f82cef8e63e77333ba9d1faeece48792383d21c1b0c5c56f0184696c943c031fb8c90620a15475778d9e325d726f91219a88bd2b3b46d964f239ccb6bd7d3c9770b23827aa4bceef130579f8b40b739ceacc8e1902d94825250fba60afa458fefdbefecd5ba113638334210c7a6d48c154948f961758d37c72bba2692755f17c3e04b04a732811657db3ee718c3d093425d1faf69903d879a8e3014b6f1ad6546dc8edd1f206269d3b5c5ddf08ee5e7a95f9645da9303c24dadb3c7c0fa6f7c8f2f76a19a49796d969a31e435e2282786f2e5f4bfef6e644cd52accd9ca795d097d6d30d3acc1fd5e99b461cebb9ef54e06e776772825bc3ce3b1cd0765327dae66219112d92a6bc334082282da00464d4d1ba66f3dfd1e32c69ed68e8a5437f0531e468f154c0c9cfd935492f75687f62f29bd8effc7558e3ff144bd90b9cc8dba74843f0ae4feb94b66ce614be2b2e0fc4e99d89ca1e9e89be2399a54f78681793c4e02b477f08846ba0ba98b5b0cfb7665c0207f6741342f79d6032c904765eff8571b8b3904a6cfb8b202a94d772f78b4747e0ee5621db71987dfca7deb208949bdf83a0d62bd2d96e19d45b5a9178cae66f267b2e354ab3854f727ae187474e36d129fe4c022a47b0983d64bfdade2f277e209eab09395384edffd0b7c41f5d8addd23c613a5e521189caeb2d2c1da75c4e9d12b3bc39ed972829c0d7dd33803efd2856e579ea5767f291bded8b07831bfe728f4a638705d0b646f22e1ceb9d421b8839f0b9235bc2f45458d26e8cbb1e5d100af6fe508a70d16b6fcfa17b2a544a63ba14f907ca182f8e45157bcd5a37517dfb180e8a19d1af55a6df234aff534d850cfdd93ba96d107e3cd1a095495575b5e0a6809cfdc844f69bc56988cd970d667d6e01a175451fcfd3fa9f0f0c1ab0c89228827439a2489d572c48353fa2e183bfcd7927457a4c797034b97e86ad9ea8dbc5fb2b8d3a0dce2d4a48506798420039eeb1797bc00fbcbb4c462bd6e45e3a0d7abecdccb0e7ee2ee0eddf8e699aa631f418bd17c5111af904dda61a5423d1baa61a1d6f9d70a4913f9ae4fb794e54b3afff0887bca016784b6dd697ede83d648bb05526c377999976d082619cc0961958b40695593ee8d97a8d3b4ae931026e7ece0bd0295f9bfa397a355fb859193fe0e099a6a76c9b4ab4a01ff281d6cccf7dd324149a9e72b6100bddd66b54f414a74b4f0c320f5f5a0bb3f50556571d56f02a33290245b5b1bbe6e289a256da86ba7669c246f7ba6f1b286c149686f9dbc64200c5c11e1b6c9cc64647501b6f088dbd48e11fb6f6c8753c1d1edd3cbba24e47275adf2f8bf1e85c4d3376d8d627d45a56dc47d2b37efcf1bebc799038844d21a906dbf2d8c1319b35a148ad11ca47e7ba48fcdb7cb5a1d87926d65a78fc63cf9a4585c1b"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ctinfo={0x1050, 0xa, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xacdf}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xffbc}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x1138, 0x12, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1074, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x24f7}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x102a, 0x6, {0x7, 'nat\x00', 0x7, 0x6, "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"}}, @TCA_IPT_HOOK={0x8}]}, {0x9f, 0x6, "8e53258ec7937c376a211dda3f8039ce4eeb5d865afa748b772b624ae9a40514f2c0b90ac925ffbdcdb281b7cd34e909e03f4a4968a26e0690e75a4222e37e1091e981725be0a3b5b0acb002889a09b4edfe23319f9471aff50bc30f4767ed238882a3bd6a73984473f19eb8c7a6f274819c0fd0a6a7af7d4932a863214d73d86e692027a0d367322ef8db9fe8f7d470b193d2e106400d82a0aa1b"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0xc0, 0x3, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x20, 0x3, 0x2, 0x4}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xd8b0, 0x10000000, 0x47, 0x8}, 0x1}}]}, {0x56, 0x6, "f0f43ba479114f1ee95646f2a07fe8b4e82780ff56fe36e4a7bd158349878554248bf08a01d4881cef579873da630f1116dea035b339272d8483f79758aa52754985138a12acf19a6f018c9a7530ae95f97d"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x875c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) connect(r2, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:35 executing program 5: select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x500) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:35 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x9c440, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@private, @remote, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@loopback, r2}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@remote, 0x5c, r2}) 21:43:35 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x1a}, 0x10) 21:43:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) 21:43:36 executing program 5: select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = socket(0x25, 0x5, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000400), 0x8) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x1, 0x1, 0x2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80, 0x5, 0x6}}) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/254, &(0x7f0000000000)=0xfe) 21:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) socketpair(0x22, 0x3, 0xffffffd5, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom(r1, &(0x7f0000000100)=""/94, 0x5e, 0x10120, &(0x7f0000000180)=@ll={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x80) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x0, 0x0, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) connect(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x3, 0x3, 0x4, 0x2}}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) getpgrp(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x29, 0xd1, 0xff, 0x3ff, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, @private1={0xfc, 0x1, [], 0x1}, 0x760, 0x40, 0x5, 0xfffffffb}}) 21:43:36 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000600)=@un=@abs, &(0x7f0000000680)=0x80, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x4001) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000002c0)) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x10}, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4, 0x6, 0x2, 0x100, 0x3, 0x4000020}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r2, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x4, 0x1f, 0x4, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x4, 0x4, 0x0, 0x6, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, 0x7f0, 0x80, 0xfffffff7, 0x5ff8}}) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x5, 0xffff, &(0x7f0000000000)="77d81634915585546b9873589bafec59150bb84e7c60dfe6789e37271a7f06daac98a5e53e8bcfaa6ad53aec5430951bf8a1909b5277abfa07c8ecda9a8c5f82792611f346b63d526779927a0ea4fe822f5b020fd49f49e4ed49b04343c3dac2a76c6491ee566704"}) ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f00000000c0)=0x3) 21:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x0, 0x0, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = socket$inet6(0xa, 0x6, 0x8f71) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) connect(r3, &(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x2, 0x5, 0x81, 0x81, "1e61835ddd5213257dc6e6d0dd582ed2385144753d5e365d40b7e71ab9f423ad6549071e46a5e8c85272ebd87de4936149e66f904e86a5a189beb9a10ff270", 0x20}, 0x80) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r1, r2}) 21:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 3: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) getpgrp(0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x0, 0x0, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = socket(0x25, 0x5, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000400), 0x8) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x0, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0x6) 21:43:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = socket(0x25, 0x5, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000400), 0x8) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x0, 0x0, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb, 0x180) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) socketpair(0x8, 0x4, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) socketpair(0x2, 0xa, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000300)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="140020480b2f8a7500", @ANYRES16=r6, @ANYBLOB="0100000000000000000087000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x38, 0x49, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, r7, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x8015) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xd3, 0x5b, "4d299ee3eb25503bacda433309f5dbc577ddcd2963dd4380d570711b5da571522e811f392106bf0c01bb909e1fcc26c05805f727524399494b7694039d537fc8ff7c111788d5dbe0cccc3fcc6fd65f4c2e288f8bc97368230f86dc45a123d0413c10f49539df927268a09ecc8a8e78f3f59621cd67296adb18f397d1ddce01dc2ef64e0b3008a368a2c67d3ad98702670e31ccd4f7067a0d3f5ae84460a1c2117f732db386ac37e387a0d79e789f721c20a4f09cce9162aff8ecf61b024641233aff2f1e63af31df85de9de6d599c1"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4e3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44040}, 0x40080) 21:43:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000200)=@delchain={0x680, 0x65, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1}, {0x0, 0xd}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x650, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb7}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7c}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_ACT={0x61c, 0x6, [@m_tunnel_key={0xb0, 0x1f, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}]}, {0x52, 0x6, "4be15b4ba000f2e774b55b18b30015c9664334d3dc345396a658b50e36a9c7bd6fb4adf2ad4d0adddf061b6de18db628b50cf0be5e69d4d41551e776421d87c7076745f86104e00aa143d6f02399"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x190, 0xe, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4}]}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2808b03a351ff4c0}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7f4669926b477167}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xc3, 0x6, "a1105b5b181acd0d7b0d8d477c8f1b811b2dae37aa67414cd62756f064376f307c8a4ffd43d9f247c83039854ba624f296283b17e5e4e94b9d329c30c8a1364384f52100d15bc355dd0fd57c63b49e34f597b293a77cd25e99937791ce43b0e5515dade49c6309f22b0d2b72d30e970136eb18ba518b4f42c62d3ea81b2f394c63aba3f26eb7a41e519ca2f3ba7a0e4ed0bad88444114da847ce51d3a901c3d0cbfb19575cf46d19c598ad54f079891e7853583d21075c50a563c1f015b546"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x184, 0x4, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x250e, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x108f, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfc, 0x7, 0x2f8, 0xe26d683}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7f, 0xffffffffffffffff, 0x8, 0x7fff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xeff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1585, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x1, 0x4, 0xfffffffe}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffff5a, 0x8001, 0xffffffffffffffff, 0x1ff, 0x400}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7f, 0x7, 0x81, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xcfd, 0xffffffffffffffff}}]}, {0xa4, 0x6, "4781bd82dec8cb71d84d6b8c28945da920ad66a3c6965f36c5c0bf35560446b2b3d40e3a09b48bdb38ae79ef3fe74562f3b785029d0751ce4a7633b9e09ae079394a88004279eac21bb584f7643fc14685dc43b003e2e75d65675d702be21886e1103139a901820d3f1b3099ea10ecde9d6c9ee7db469a279e05ad850de07b0ac6256f85737fef61144003298114f6e87af436d4acf308dd6de5151472f3f994"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_sample={0xcc, 0xe, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x8, 0x6, 0x1, 0xffffffff}}]}, {0x65, 0x6, "8b1bb73ee0224c75f8a4762b9ba46078c6c8c7f4aaa0e7b6e641b4c2f46cfa2026da7505fbe9e718d83161e595637f9747667562f9fc6d1ce60129513f098eb26b7df2142cf4cf22406396bb5e1ec54d32e6b3884fdbb73d8234fa46ad7d152da3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x188, 0x9, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0xd9, 0xffffffffffffffff, 0x10001, 0x3}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, [], 0x37}}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "7f29a7bb6dd3d4a26559444446041501"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={[], [], @broadcast}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x10}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x6}}]}}]}, 0x680}, 0x1, 0x0, 0x0, 0xc004}, 0x24000000) 21:43:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = socket(0x25, 0x5, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000400), 0x8) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:36 executing program 1: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'macvlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r0, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x81, 0x9420, 0x1, @loopback, @empty, 0x8700, 0x40, 0x14, 0x3}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={@mcast2, 0x50, r3}) connect(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) socket(0x25, 0x5, 0x3) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 2: connect(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x1c, 0x80) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="34a9000005000000020f08888eebcb927b8682f7e6628959fa1a3416c86b33f504437a43093e9c6340814a0daba98af698c806d9e066be2ef1400813729db08deab46f8eb734b657a326d9ac55bc9210978a05d24961b04666093ef29c7703f6dcc77cf45a3e8463983b469b62b86da4e26ea19f79447919a474d73bc96d4ee365c17c2ad006c303000000a8715e71255dd873ede68d4fb6b4a8c293659cfaa2b6de750e2a0493bdf0093f591e4601576c5700cd482b2a715ba78e84867bb89a1aa4437bd6e2f444682c0b408cdc0463230e150444144ca64824da4bfe6464190e7f0270f92ca7730e0ded9f42acc65ea8f61e7175b5cbf00d4d985451e94d86d807e32f4771391400e19b54adf4645ce96754"]) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffffdc820a0a, 0x21a000) read$usbfs(r1, &(0x7f0000000080)=""/176, 0xb0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x400000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000180)={0x2, 0x8}) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 2: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x28) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x101000, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000080)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1f, 0x8, 0x3, 0x5b0, 0x340, r1, 0x0, [], 0x0, r4, 0x1, 0x5, 0x1}, 0x40) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x2) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x99) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0xfffffffffffffc6e) 21:43:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb, 0x180) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) socketpair(0x8, 0x4, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) socketpair(0x2, 0xa, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000300)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="140020480b2f8a7500", @ANYRES16=r6, @ANYBLOB="0100000000000000000087000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x38, 0x49, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, r7, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x8015) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xd3, 0x5b, "4d299ee3eb25503bacda433309f5dbc577ddcd2963dd4380d570711b5da571522e811f392106bf0c01bb909e1fcc26c05805f727524399494b7694039d537fc8ff7c111788d5dbe0cccc3fcc6fd65f4c2e288f8bc97368230f86dc45a123d0413c10f49539df927268a09ecc8a8e78f3f59621cd67296adb18f397d1ddce01dc2ef64e0b3008a368a2c67d3ad98702670e31ccd4f7067a0d3f5ae84460a1c2117f732db386ac37e387a0d79e789f721c20a4f09cce9162aff8ecf61b024641233aff2f1e63af31df85de9de6d599c1"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4e3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44040}, 0x40080) 21:43:36 executing program 4: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x0) 21:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)={0x4, 0x78, 0x10000, 0x6, 0x0, 0x1}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000001840)=ANY=[@ANYBLOB="0e5100000a00000082800600888f00098d84f6a1f6cb711e244cae0a2aaabfc461cb7910c2555f6b0775907d14ab49fdbbee5eb34b12bbea76709dfb7d7901b4b0882e16b8d9dcb3dc5a36ad7a324e2089bbc82d82f671aec9b48ed814c9eed332a5f65d309a4c79510c626554df6055c3baa855637c6d1855e40d9a7440f5b3f2cc2b7cda3c5f1663765521bb2451f97eca96c56c3c7fd783c921858845fcae994c937562e2bbde8d23dfa132b3c2c6510b1b3c98c28ac9ad1df03e4e8f1418e52a8f74c6db3a02cb19d36703023602f3a92c1c3b14f03dda49607f8f9163ab1caa67ad4ac5085d94f2984b3c046761347c2be11b0e"]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r5 = socket(0x1e, 0x6, 0xffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1450, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_FRAME_MATCH={0x35, 0x5b, "a581238982cf8fd626654a5b9295c0d25710a42d058b1239754196ad87b2722c5cf8b81dfabe06ef0e5eca494489e3b335"}, @NL80211_ATTR_FRAME_MATCH={0xe4, 0x5b, "e383d0b58ae35b9eac1114aa13c0c028769ab418a43c0bf3e2406c5c00f1dd6f68eb3047781e88c1c0bdd89c9adf6251631f460ecd86dec26da3e1ad525b732f45dca0ba23c65ba7148f6670d7a1c667914e5aea3acf2068e8ce160bc8930e4a22a6320f8aa552c12597c55f92665fcfeb1205a42e4abce5e0bfc65dd3c7a52b63cd5ece7ea8d7f5527e6a2d6407317fc1cda57bfe077a423d24aaf906ee6e6c592665d79cf53f7810ebbd68409fab377e55c501b74629a9235e06f0c93c3794e6ae0a3fd502e870c1f13420d0dde0f1d353948fb732e897d8a450f092932080"}, @NL80211_ATTR_FRAME_MATCH={0x1b, 0x5b, "2c14a769b31d05c48467a82df3a3180b84623d49b17930"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "5d996e60e876d5fb67475b478a24c60ce17e6aa014489c52818bf62af922e64eaf416d3ce23555054de3bfbefa12f05e59b0596578f165b279a5f6c8b737bb9baff8047f48cd9e951e5b372c1736ba299a6e1d9c5687e60810b304bafcfce7bb88dcac4bd34b0da3e7a8c7ed353135ec59dc23be6a290237b7aa7da48f46f09b707047b0825800e6ec2c8b5ee343c42c0ec13c7f1a4f5ae444259ce2b074564e474b7a36d7ed76"}, @NL80211_ATTR_FRAME_MATCH={0x103, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xe7, 0x5b, "f5c49076a525db942170a0ab42935f524441edefde102ea47ae12c5220fef88704e4793c8f4bd4c9bb1a2936e04123382ed19934c34967ae25a7c50d2f39328f99c9cac4941c8b75923a7602dc8a33aca6e6433def3cb6da4183e75e3d97051bf29abf4103df5b9e6c32792028f5083af5f38fb08b5fa94e3deffcd92b4c7207b4a1f6f94da635a3b715626fa02e60c835bc356d59423eccaf779a7de4a3c85735ea6c7442b69d41a2639269d208652c3895778ccd16e72c5766663f4f0a71877170f95c96821633becc883992e59ba0967602ae85d923ade9bbb6c920a41db90f7c45"}, @NL80211_ATTR_FRAME_MATCH={0x52, 0x5b, "1f0c5cf5db6b53d388b569f788c26271005805ac2fa5c2050bb700d2746f9b9a85e2849622c00cd12af5c663ff02fe538c9aa2e2fa3edcf7d387dd8a4f817554fd392c380c2a83e5e8273e689d0d"}]}, 0x1450}, 0x1, 0x0, 0x0, 0x4040}, 0x48800) recvfrom(r4, &(0x7f0000000080)=""/34, 0x22, 0x2000, &(0x7f0000000200)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80) 21:43:36 executing program 4: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x0) 21:43:36 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) getpgrp(0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:36 executing program 0: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x8000000, @empty}, 0x80) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 4: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x0) 21:43:36 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) getpgrp(0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:36 executing program 0: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:36 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:36 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:36 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) getpgrp(0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:37 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0x8001, 0x6}) 21:43:37 executing program 0: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:37 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:37 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000600)) 21:43:37 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x80, 0x2, 0x10, @remote, @loopback, 0x10, 0x7800, 0x10001, 0x4}}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)={0xe633, 0x1e, [{0x6}, {0x2}, {0x3}, {0xf, 0x1}, {0xc, 0x1}, {0xa, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0x1, 0x1}, {0xf}, {}, {0x7, 0x1}, {0x7, 0x1}, {0x6}, {0x4}, {0xf, 0x1}, {0x6, 0x1}, {0x6}, {0xd}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x8}, {0xb, 0x1}, {0x2, 0x1}, {0x5d}, {0x7, 0x1}, {0xe}]}) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:37 executing program 0: select(0x40, &(0x7f0000000500)={0x4, 0x98, 0x6efc, 0x5438, 0x3, 0xa62b, 0x7418, 0x9}, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0xa5}, &(0x7f0000000580)={0x8, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:37 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:37 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000600)) 21:43:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@caif=@dgm, 0x80, &(0x7f0000000100)}, 0x12000) 21:43:37 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, 0xffffffffffffffff, 0x0) 21:43:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x4, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9310}, @call={0x85, 0x0, 0x0, 0x40}, @jmp={0x5, 0x1, 0xb, 0xb, 0x9, 0x1}], &(0x7f0000000100)='GPL\x00', 0x84, 0x16, &(0x7f0000000140)=""/22, 0x41000, 0x8, [], r2, 0x1c, r3, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x5, 0xffff, 0x2}, 0x10, 0x2e2d1, r4}, 0x78) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x9}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) 21:43:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x80, 0x2, 0x10, @remote, @loopback, 0x10, 0x7800, 0x10001, 0x4}}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)={0xe633, 0x1e, [{0x6}, {0x2}, {0x3}, {0xf, 0x1}, {0xc, 0x1}, {0xa, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0x1, 0x1}, {0xf}, {}, {0x7, 0x1}, {0x7, 0x1}, {0x6}, {0x4}, {0xf, 0x1}, {0x6, 0x1}, {0x6}, {0xd}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x8}, {0xb, 0x1}, {0x2, 0x1}, {0x5d}, {0x7, 0x1}, {0xe}]}) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:37 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000600)) 21:43:37 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, 0xffffffffffffffff, 0x0) 21:43:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) read$usbfs(r1, &(0x7f0000000080)=""/97, 0x61) 21:43:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x29, 0x2a, [@mic={0x8c, 0x18, {0x8a5, "387547dce1ab", @long="c02ec8da5a59a7e6bad5069a47b3e64d"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20001009) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:37 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x19}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000040)=0x80) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:37 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x0, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:37 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x1) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, 0xffffffffffffffff, 0x0) 21:43:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80) 21:43:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 21:43:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8d0) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x3c, 0x19, 0x2, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xff, 0x7, 0x2100}, [@RTA_IIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_PRIORITY={0x8, 0x6, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x2000c000) 21:43:37 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x0, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x881) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x4c, 0x8, &(0x7f0000000040)="b6dc0ffc229548d494af5879b99a2fd3a2d2abf0aa220ce0898c812bfc439315d25868b9d3a542ff800275da7e76fd44784b8f4f0a27ecc39c52c483d4539b23c6d58a4c57001730d11cf28d8826d6455e30dd7cba650481096675f176b2"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) getpeername(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f00000002c0)=0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3a330000004070a8000400000000"], 0x14}}, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) socketpair(0x28, 0xa, 0x37, &(0x7f0000001780)) 21:43:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x0, 0x5, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/81, 0x51}], 0x7, &(0x7f0000001540)=""/133, 0x85}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000016c0)={'ip6tnl0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x7, 0x3f, 0xe, @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x7800, 0x10, 0xffffffff, 0x7}}) 21:43:38 executing program 1: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x5, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4, 0x80000000, 0x8}, &(0x7f0000000200)=0x7ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x3}}, 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)={0x9, 0x7fff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r2, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) socket$inet6(0xa, 0x2, 0x3ecf) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000080)=0xbf0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) clock_getres(0x3, &(0x7f0000000000)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r3 = syz_open_dev$char_raw(&(0x7f00000000c0)='/dev/raw/raw#\x00', 0x1, 0x200000) ioctl$CHAR_RAW_ROGET(r3, 0x125e, &(0x7f0000000100)) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000040)=0x101) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8, 0x0, 0x8, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:38 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000140)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000100)={0x0, &(0x7f0000000000)="3a23637258b5a311210cb373e63d5537050ead273c7c057d1e89e79940c6d72ac6b3a5653638a4437ad3c0a79c0f75e66c8c61d1522ab994b86c9b765b74359b1cf8d338f26fa263702cc266612cb82c9940cea8eb58c21d887497e964551b8123ff0fd9e26104ebeaafb991d7bdba420f9ac68db2dccc6fea71fc77fc34bfdd337c09fe4c01e4676927d5493bb57cc8c9b78eff3823d52f74d7443d4a8f1ee0dea1c8fca17b906f0ebbd5e18e9c62460969116a10b5403620cd10fb5e6a065fc290d847836311a11dd674d2f66633120c512aeec0d77ad0e150afff393c4dca612f0db3f4a8ac7893dcc51ea8156f195e52f11c4bebdc"}) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x7, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301000, 0x0) read$usbfs(r1, &(0x7f0000000040)=""/77, 0x4d) 21:43:38 executing program 1: read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/138, 0x8a) connect(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x6, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r1}) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301000, 0x0) read$usbfs(r1, &(0x7f0000000040)=""/77, 0x4d) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x32133f9, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80000, 0xffffffff) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 4: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) 21:43:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301000, 0x0) read$usbfs(r1, &(0x7f0000000040)=""/77, 0x4d) 21:43:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r1}) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000600)) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:38 executing program 4: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:38 executing program 1: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301000, 0x0) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8}, &(0x7f0000000600)) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:38 executing program 4: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301000, 0x0) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:38 executing program 3: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:38 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8}, 0x0) 21:43:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x254, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75e4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @ipv4={[], [], @local}, 0xdb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008881) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301000, 0x0) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) 21:43:38 executing program 3: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x254, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75e4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @ipv4={[], [], @local}, 0xdb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008881) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:38 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301000, 0x0) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) 21:43:38 executing program 3: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) 21:43:39 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8}, 0x0) 21:43:39 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:39 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, 0xffffffffffffffff, 0x0) 21:43:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x254, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75e4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @ipv4={[], [], @local}, 0xdb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008881) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) 21:43:39 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:39 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:39 executing program 1: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:39 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, 0xffffffffffffffff, 0x0) 21:43:39 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x254, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75e4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @ipv4={[], [], @local}, 0xdb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008881) 21:43:39 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:39 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x12, 0xffffffffffffffff, 0x0) 21:43:40 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:40 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x8}, 0x0) 21:43:40 executing program 1: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:40 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:40 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:40 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockname(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:40 executing program 1: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:40 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:40 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:40 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:40 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:40 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:40 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:41 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:41 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:41 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 5: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:41 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:41 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:41 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:41 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) 21:43:41 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:41 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:41 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:41 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:41 executing program 5: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x4140) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) 21:43:41 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:41 executing program 0: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:41 executing program 5: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:41 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:41 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:41 executing program 5: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x43}}}, 0x14) connect(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x1, "965f94d332b8108e2fb39fb1c7a78e700b53d1eb27bb3c2fde72fa7c50bd51cc24e9a320a3d416a854fac62bd933d11bdff8be1fa209ec7793dad073bb9bcef0a7f7ad657884430007201419c1e8951455732f2797f521427a3a5637b05d14d820c2c5cfceaeaf901bd7e401b83fb60a1387ec9f6250b734dfd99fabf920"}, 0x80) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:41 executing program 3: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:41 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x3, 0x111000) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000100)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0xf, 0xf7fe, 0xfa0, 0xaa, 0x5, &(0x7f0000000000)="e038311b49a5cde89a4da8705f7e85113bc1fbfd61920aa333db810e2b71bf625373039cc646717d3dad1dda981081611e445c2b411702a9591ff4a3d38fdb04528bd0951900e6c528c80aa987e45d326d2cd69e4f8df0cb265dffdebae411fd321f4c46df22cb8e1f030ab52017863b762d9efa578af6696a850ecd76e4b033351334c1145b15ebec7f751e30a4384e089ef7049748e1a49fd027eaae08ba2150844417f54be3254984"}) 21:43:41 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:41 executing program 3: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:41 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:42 executing program 2: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:42 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000000)=0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc8a3}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r2 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r2, 0x0) 21:43:42 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000000)={0x7, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40848}, 0x4000000) 21:43:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000000)={0x7, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40848}, 0x4000000) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 5: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x80000000}) mmap$usbfs(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xc, 0x12, r0, 0x0) 21:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 21:43:42 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:43:42 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:42 executing program 1: ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) syz_open_dev$usbfs(0x0, 0x1000000, 0x109901) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@remote, @private2={0xfc, 0x2, [], 0x1}, @private1, 0x2, 0x5, 0x5, 0x400, 0x8e}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000091) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x3) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x1d) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)={0xa}) socket(0x29, 0x2, 0xffffffff) 21:43:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 21:43:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, r1, 0x11}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0x7, 0x1, 0x0, r1}], &(0x7f00000000c0)='syzkaller\x00', 0x40, 0x12, &(0x7f0000000100)=""/18, 0x41000, 0x8, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x4, 0xb62}, 0x10}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r1, 0x5}, 0x10) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 21:43:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)) 21:43:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 21:43:42 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local, 0x2}) 21:43:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x7, 0x8, 0x4}, @GTPA_TID={0x0, 0x3, 0xa25}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x40002) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x2}, 0x6) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local, 0x2}) [ 2859.491086] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x2}, 0x6) 21:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local, 0x2}) 21:43:42 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) [ 2859.580945] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x2}, 0x6) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) 21:43:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) [ 2859.678380] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 21:43:42 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:42 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, 0xffffffffffffffff, 0x0) 21:43:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 21:43:43 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, 0xffffffffffffffff, 0x0) 21:43:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2859.783507] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:43 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, 0xffffffffffffffff, 0x0) 21:43:43 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, 0xffffffffffffffff, 0x0) 21:43:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 21:43:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 21:43:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:43 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, 0xffffffffffffffff, 0x0) 21:43:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) [ 2859.928500] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:43 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, 0xffffffffffffffff, 0x0) 21:43:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) 21:43:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 21:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:43 executing program 1: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) 21:43:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:43 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:43 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) 21:43:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:43 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) [ 2860.255288] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2860.272851] FAULT_INJECTION: forcing a failure. [ 2860.272851] name failslab, interval 1, probability 0, space 0, times 0 21:43:43 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:43 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 2860.301754] CPU: 1 PID: 21295 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2860.309680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.319049] Call Trace: [ 2860.321648] dump_stack+0x1b2/0x281 [ 2860.325329] should_fail.cold+0x10a/0x149 [ 2860.329519] should_failslab+0xd6/0x130 [ 2860.333531] kmem_cache_alloc_node+0x54/0x410 [ 2860.338034] __alloc_skb+0x5c/0x510 [ 2860.341674] send_monitor_note+0xca/0x420 [ 2860.345830] ? create_monitor_ctrl_open+0x630/0x630 [ 2860.350857] ? apparmor_capable+0xfa/0x4a0 21:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 2860.355098] ? security_capable+0x88/0xb0 [ 2860.359256] hci_sock_bind+0x51f/0x1170 [ 2860.363239] ? hci_sock_ioctl+0x690/0x690 [ 2860.367399] ? security_socket_bind+0x83/0xb0 [ 2860.371901] SyS_bind+0x174/0x1f0 [ 2860.375360] ? SyS_socketpair+0x480/0x480 [ 2860.379517] ? wait_for_completion_io+0x10/0x10 [ 2860.384188] ? vfs_write+0x319/0x4d0 [ 2860.387907] ? fput+0xb/0x140 [ 2860.391015] ? SyS_write+0x14d/0x210 [ 2860.394733] ? SyS_read+0x210/0x210 [ 2860.398359] ? __do_page_fault+0x159/0xad0 [ 2860.402594] ? do_syscall_64+0x4c/0x640 [ 2860.406569] ? SyS_socketpair+0x480/0x480 [ 2860.410701] do_syscall_64+0x1d5/0x640 [ 2860.414593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2860.419764] RIP: 0033:0x465b09 [ 2860.422934] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2860.430634] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2860.437898] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2860.445151] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 21:43:43 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:43 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) [ 2860.452403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2860.459652] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:43 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:43 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:43 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 2860.632998] FAULT_INJECTION: forcing a failure. [ 2860.632998] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.649639] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2860.662582] CPU: 1 PID: 21318 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2860.670505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.679867] Call Trace: 21:43:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) [ 2860.682464] dump_stack+0x1b2/0x281 [ 2860.686112] should_fail.cold+0x10a/0x149 [ 2860.690269] should_failslab+0xd6/0x130 [ 2860.694252] kmem_cache_alloc_node_trace+0x58/0x400 [ 2860.699279] __kmalloc_node_track_caller+0x38/0x70 [ 2860.704218] __alloc_skb+0x96/0x510 [ 2860.707858] send_monitor_note+0xca/0x420 [ 2860.712020] ? create_monitor_ctrl_open+0x630/0x630 [ 2860.717065] ? apparmor_capable+0xfa/0x4a0 [ 2860.721404] ? security_capable+0x88/0xb0 [ 2860.725571] hci_sock_bind+0x51f/0x1170 [ 2860.729558] ? hci_sock_ioctl+0x690/0x690 [ 2860.733715] ? security_socket_bind+0x83/0xb0 [ 2860.738230] SyS_bind+0x174/0x1f0 [ 2860.741685] ? SyS_socketpair+0x480/0x480 [ 2860.745833] ? wait_for_completion_io+0x10/0x10 [ 2860.750494] ? vfs_write+0x319/0x4d0 [ 2860.754193] ? fput+0xb/0x140 [ 2860.757284] ? SyS_write+0x14d/0x210 [ 2860.760978] ? SyS_read+0x210/0x210 [ 2860.764592] ? __do_page_fault+0x159/0xad0 [ 2860.768810] ? do_syscall_64+0x4c/0x640 [ 2860.773220] ? SyS_socketpair+0x480/0x480 [ 2860.777357] do_syscall_64+0x1d5/0x640 [ 2860.781250] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2860.786433] RIP: 0033:0x465b09 [ 2860.789602] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2860.797555] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2860.804832] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2860.812099] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2860.819388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:43:44 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 21:43:44 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:44 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2860.827436] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 21:43:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x0) 21:43:44 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) [ 2860.904750] FAULT_INJECTION: forcing a failure. [ 2860.904750] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.918680] FAULT_INJECTION: forcing a failure. [ 2860.918680] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.938627] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2860.940399] CPU: 1 PID: 21335 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 21:43:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 2860.952214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.961583] Call Trace: [ 2860.964179] dump_stack+0x1b2/0x281 [ 2860.967813] should_fail.cold+0x10a/0x149 [ 2860.971987] should_failslab+0xd6/0x130 [ 2860.975996] kmem_cache_alloc_node+0x54/0x410 [ 2860.980523] __alloc_skb+0x5c/0x510 [ 2860.984165] send_monitor_note+0xca/0x420 [ 2860.988317] ? create_monitor_ctrl_open+0x630/0x630 [ 2860.993324] ? apparmor_capable+0xfa/0x4a0 [ 2860.997556] ? security_capable+0x88/0xb0 21:43:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 2861.001704] hci_sock_bind+0x538/0x1170 [ 2861.005681] ? hci_sock_ioctl+0x690/0x690 [ 2861.009824] ? security_socket_bind+0x83/0xb0 [ 2861.014315] SyS_bind+0x174/0x1f0 [ 2861.017759] ? SyS_socketpair+0x480/0x480 [ 2861.021918] ? wait_for_completion_io+0x10/0x10 [ 2861.026590] ? vfs_write+0x319/0x4d0 [ 2861.030316] ? fput+0xb/0x140 [ 2861.033415] ? SyS_write+0x14d/0x210 [ 2861.037136] ? SyS_read+0x210/0x210 [ 2861.040785] ? __do_page_fault+0x159/0xad0 [ 2861.045015] ? do_syscall_64+0x4c/0x640 [ 2861.049065] ? SyS_socketpair+0x480/0x480 21:43:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 2861.053207] do_syscall_64+0x1d5/0x640 [ 2861.057096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2861.062280] RIP: 0033:0x465b09 [ 2861.065458] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2861.073164] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2861.080446] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2861.087715] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2861.094983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2861.102950] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2861.110228] CPU: 0 PID: 21338 Comm: syz-executor.2 Not tainted 4.14.218-syzkaller #0 [ 2861.118126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.127506] Call Trace: [ 2861.130253] dump_stack+0x1b2/0x281 [ 2861.133895] should_fail.cold+0x10a/0x149 [ 2861.138057] should_failslab+0xd6/0x130 [ 2861.142041] kmem_cache_alloc+0x28e/0x3c0 [ 2861.146197] __split_vma+0xc8/0x6c0 [ 2861.149826] do_munmap+0x25b/0xc30 21:43:44 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2861.153372] mmap_region+0x217/0x1220 [ 2861.157190] do_mmap+0x5b3/0xcb0 [ 2861.160562] vm_mmap_pgoff+0x14e/0x1a0 [ 2861.164457] ? vma_is_stack_for_current+0xb0/0xb0 [ 2861.169301] ? __fget+0x225/0x360 [ 2861.172759] SyS_mmap_pgoff+0x249/0x510 [ 2861.176739] ? find_mergeable_anon_vma+0x230/0x230 [ 2861.181671] ? __do_page_fault+0x159/0xad0 [ 2861.185906] ? do_syscall_64+0x4c/0x640 [ 2861.189882] ? align_vdso_addr+0x250/0x250 [ 2861.194122] do_syscall_64+0x1d5/0x640 [ 2861.198023] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2861.203214] RIP: 0033:0x465b09 [ 2861.206489] RSP: 002b:00007f86a1ee8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2861.211892] FAULT_INJECTION: forcing a failure. [ 2861.211892] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.214200] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2861.214206] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2861.214212] RBP: 00007f86a1ee81d0 R08: 0000000000000003 R09: 0000000000000000 [ 2861.214217] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 2861.214229] R13: 00007ffdf06b70bf R14: 00007f86a1ee8300 R15: 0000000000022000 [ 2861.261713] CPU: 1 PID: 21357 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2861.269610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.278969] Call Trace: [ 2861.281561] dump_stack+0x1b2/0x281 [ 2861.285195] should_fail.cold+0x10a/0x149 [ 2861.289356] should_failslab+0xd6/0x130 [ 2861.293339] kmem_cache_alloc_node_trace+0x58/0x400 [ 2861.298593] __kmalloc_node_track_caller+0x38/0x70 [ 2861.303570] __alloc_skb+0x96/0x510 [ 2861.307185] send_monitor_note+0xca/0x420 [ 2861.311318] ? create_monitor_ctrl_open+0x630/0x630 [ 2861.316313] ? apparmor_capable+0xfa/0x4a0 [ 2861.320532] ? security_capable+0x88/0xb0 [ 2861.325010] hci_sock_bind+0x538/0x1170 [ 2861.328966] ? hci_sock_ioctl+0x690/0x690 [ 2861.333101] ? security_socket_bind+0x83/0xb0 [ 2861.337580] SyS_bind+0x174/0x1f0 [ 2861.341013] ? SyS_socketpair+0x480/0x480 [ 2861.345142] ? wait_for_completion_io+0x10/0x10 [ 2861.349893] ? vfs_write+0x319/0x4d0 [ 2861.353594] ? fput+0xb/0x140 [ 2861.356693] ? SyS_write+0x14d/0x210 [ 2861.360387] ? SyS_read+0x210/0x210 [ 2861.364014] ? __do_page_fault+0x159/0xad0 [ 2861.368230] ? do_syscall_64+0x4c/0x640 [ 2861.372185] ? SyS_socketpair+0x480/0x480 [ 2861.376315] do_syscall_64+0x1d5/0x640 [ 2861.380188] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2861.385358] RIP: 0033:0x465b09 [ 2861.388527] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2861.396241] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 21:43:44 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 21:43:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 21:43:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:44 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2861.403934] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2861.411185] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2861.418435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2861.426563] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) [ 2861.521410] FAULT_INJECTION: forcing a failure. [ 2861.521410] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.527707] FAULT_INJECTION: forcing a failure. [ 2861.527707] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.533152] CPU: 0 PID: 21367 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2861.552054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.561503] Call Trace: [ 2861.564088] dump_stack+0x1b2/0x281 [ 2861.567701] should_fail.cold+0x10a/0x149 [ 2861.571835] should_failslab+0xd6/0x130 [ 2861.575797] kmem_cache_alloc_node+0x54/0x410 [ 2861.580282] __alloc_skb+0x5c/0x510 [ 2861.583900] create_monitor_event+0x3a1/0x800 [ 2861.588379] hci_sock_bind+0x674/0x1170 [ 2861.592353] ? hci_sock_ioctl+0x690/0x690 [ 2861.596486] ? security_socket_bind+0x83/0xb0 [ 2861.600980] SyS_bind+0x174/0x1f0 [ 2861.604421] ? SyS_socketpair+0x480/0x480 [ 2861.608569] ? wait_for_completion_io+0x10/0x10 [ 2861.613224] ? vfs_write+0x319/0x4d0 [ 2861.616918] ? fput+0xb/0x140 [ 2861.620005] ? SyS_write+0x14d/0x210 [ 2861.623807] ? SyS_read+0x210/0x210 [ 2861.627432] ? __do_page_fault+0x159/0xad0 [ 2861.631672] ? do_syscall_64+0x4c/0x640 [ 2861.635651] ? SyS_socketpair+0x480/0x480 [ 2861.639891] do_syscall_64+0x1d5/0x640 [ 2861.643799] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2861.649080] RIP: 0033:0x465b09 [ 2861.653219] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2861.661110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 21:43:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) [ 2861.668482] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2861.675754] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2861.683072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2861.690334] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2861.697864] CPU: 1 PID: 21372 Comm: syz-executor.2 Not tainted 4.14.218-syzkaller #0 [ 2861.705762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.715117] Call Trace: [ 2861.717710] dump_stack+0x1b2/0x281 [ 2861.722126] should_fail.cold+0x10a/0x149 [ 2861.726287] should_failslab+0xd6/0x130 [ 2861.730278] kmem_cache_alloc+0x40/0x3c0 [ 2861.734344] anon_vma_clone+0xe0/0x5b0 [ 2861.738240] __split_vma+0x282/0x6c0 [ 2861.741956] do_munmap+0x25b/0xc30 [ 2861.745489] mmap_region+0x217/0x1220 [ 2861.749270] do_mmap+0x5b3/0xcb0 [ 2861.752616] vm_mmap_pgoff+0x14e/0x1a0 [ 2861.756519] ? vma_is_stack_for_current+0xb0/0xb0 [ 2861.761340] ? __fget+0x225/0x360 [ 2861.764785] SyS_mmap_pgoff+0x249/0x510 [ 2861.768737] ? find_mergeable_anon_vma+0x230/0x230 [ 2861.774161] ? __do_page_fault+0x159/0xad0 [ 2861.778377] ? do_syscall_64+0x4c/0x640 [ 2861.784346] ? align_vdso_addr+0x250/0x250 [ 2861.788794] do_syscall_64+0x1d5/0x640 [ 2861.792787] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2861.798013] RIP: 0033:0x465b09 [ 2861.801182] RSP: 002b:00007f86a1ee8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2861.808869] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2861.816119] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000000020fff000 21:43:45 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:45 executing program 0 (fault-call:1 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) 21:43:45 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) [ 2861.823364] RBP: 00007f86a1ee81d0 R08: 0000000000000003 R09: 0000000000000000 [ 2861.830610] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 2861.837873] R13: 00007ffdf06b70bf R14: 00007f86a1ee8300 R15: 0000000000022000 21:43:45 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 2861.924705] FAULT_INJECTION: forcing a failure. [ 2861.924705] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.925769] FAULT_INJECTION: forcing a failure. [ 2861.925769] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.936158] CPU: 0 PID: 21392 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2861.955295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.964678] Call Trace: [ 2861.967267] dump_stack+0x1b2/0x281 [ 2861.970894] should_fail.cold+0x10a/0x149 21:43:45 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 2861.975046] should_failslab+0xd6/0x130 [ 2861.979020] kmem_cache_alloc_node_trace+0x58/0x400 [ 2861.984051] __kmalloc_node_track_caller+0x38/0x70 [ 2861.988991] __alloc_skb+0x96/0x510 [ 2861.993054] create_monitor_event+0x3a1/0x800 [ 2861.997578] hci_sock_bind+0x674/0x1170 [ 2862.001553] ? hci_sock_ioctl+0x690/0x690 [ 2862.005710] ? security_socket_bind+0x83/0xb0 [ 2862.010199] SyS_bind+0x174/0x1f0 [ 2862.013640] ? SyS_socketpair+0x480/0x480 [ 2862.017781] ? wait_for_completion_io+0x10/0x10 21:43:45 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 2862.022452] ? vfs_write+0x319/0x4d0 [ 2862.026165] ? fput+0xb/0x140 [ 2862.029256] ? SyS_write+0x14d/0x210 [ 2862.032955] ? SyS_read+0x210/0x210 [ 2862.036579] ? __do_page_fault+0x159/0xad0 [ 2862.040800] ? do_syscall_64+0x4c/0x640 [ 2862.044780] ? SyS_socketpair+0x480/0x480 [ 2862.048937] do_syscall_64+0x1d5/0x640 [ 2862.052833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2862.058027] RIP: 0033:0x465b09 [ 2862.061220] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x880) 21:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) [ 2862.068968] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2862.076243] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2862.083867] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2862.091140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2862.098415] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2862.143547] CPU: 1 PID: 21391 Comm: syz-executor.2 Not tainted 4.14.218-syzkaller #0 [ 2862.151472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2862.160829] Call Trace: [ 2862.163431] dump_stack+0x1b2/0x281 [ 2862.167069] should_fail.cold+0x10a/0x149 [ 2862.171221] should_failslab+0xd6/0x130 [ 2862.175202] kmem_cache_alloc+0x28e/0x3c0 [ 2862.179355] mmap_region+0x7c1/0x1220 [ 2862.183173] do_mmap+0x5b3/0xcb0 [ 2862.186637] vm_mmap_pgoff+0x14e/0x1a0 [ 2862.190528] ? vma_is_stack_for_current+0xb0/0xb0 [ 2862.195368] ? __fget+0x225/0x360 [ 2862.198971] SyS_mmap_pgoff+0x249/0x510 [ 2862.202974] ? find_mergeable_anon_vma+0x230/0x230 [ 2862.207884] ? __do_page_fault+0x159/0xad0 [ 2862.212174] ? do_syscall_64+0x4c/0x640 [ 2862.216178] ? align_vdso_addr+0x250/0x250 [ 2862.221043] do_syscall_64+0x1d5/0x640 [ 2862.224917] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2862.230085] RIP: 0033:0x465b09 [ 2862.233370] RSP: 002b:00007f86a1ee8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 21:43:45 executing program 2 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:45 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x880) 21:43:45 executing program 0 (fault-call:1 fault-nth:6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) [ 2862.241722] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2862.248985] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2862.256233] RBP: 00007f86a1ee81d0 R08: 0000000000000003 R09: 0000000000000000 [ 2862.263480] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 2862.270862] R13: 00007ffdf06b70bf R14: 00007f86a1ee8300 R15: 0000000000022000 [ 2862.350192] FAULT_INJECTION: forcing a failure. [ 2862.350192] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.361686] CPU: 0 PID: 21417 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2862.369588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2862.378945] Call Trace: [ 2862.381540] dump_stack+0x1b2/0x281 [ 2862.385178] should_fail.cold+0x10a/0x149 [ 2862.389331] should_failslab+0xd6/0x130 [ 2862.393314] kmem_cache_alloc_node+0x54/0x410 21:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x880) 21:43:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x44001) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000240)={0x926b, 0x1a, [{0x8}, {0xf}, {0x6, 0x1}, {0x8, 0x1}, {0xd, 0x1}, {0xd}, {0x9}, {0x3}, {}, {0x1, 0x1}, {0x8, 0x1}, {0xd, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0xb, 0x1}, {0xf, 0x1}, {0xf}, {0x9}, {0x9, 0x1}, {0x5}, {0x2, 0x1}, {0xe}, {0x8, 0x1}, {0xa}, {0xc, 0x1}, {0x9, 0x1}]}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000280)={0xffff, 0x1000}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400000c, 0x2010, r0, 0x1000000000000002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x6, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x5, 0x100}, &(0x7f00000000c0)=0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xdc}}, 0x10) 21:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x20a000, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x2, 0xe, 0x1, 0xb18, 0x90, 0x5, &(0x7f0000000100)="7870f433dd93660a37d29ec2f33f628a4c5c18204c21893a20c675e45ac8270f125c0bb619312e9686cf94fe62d406def27c25569f98e224bbd25323f2df8210444c9741cac5e7cd6b105ea2854a6c57f0fcfe89ab3569872ed57704e2ec8677d5185e54139f28c3e218212c7f6211f38a3c4d2008b496af5a0749668384fe540f51860baaf776166c3146144c012513"}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc404200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x2, {@in6_addr=@private0={0xfc, 0x0, [], 0x1}, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xa0) 21:43:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, r0, 0x0) [ 2862.397828] __alloc_skb+0x5c/0x510 [ 2862.401462] create_monitor_event+0x65a/0x800 [ 2862.405963] hci_sock_bind+0x5c5/0x1170 [ 2862.410030] ? hci_sock_ioctl+0x690/0x690 [ 2862.414188] ? security_socket_bind+0x83/0xb0 [ 2862.418690] SyS_bind+0x174/0x1f0 [ 2862.422178] ? SyS_socketpair+0x480/0x480 [ 2862.426330] ? wait_for_completion_io+0x10/0x10 [ 2862.431356] ? vfs_write+0x319/0x4d0 [ 2862.435091] ? fput+0xb/0x140 [ 2862.438199] ? SyS_write+0x14d/0x210 [ 2862.441911] ? SyS_read+0x210/0x210 [ 2862.445541] ? __do_page_fault+0x159/0xad0 [ 2862.449778] ? do_syscall_64+0x4c/0x640 [ 2862.453753] ? SyS_socketpair+0x480/0x480 [ 2862.457901] do_syscall_64+0x1d5/0x640 [ 2862.461793] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2862.466982] RIP: 0033:0x465b09 [ 2862.470169] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2862.472439] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2862.477979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2862.477985] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x5, 0x101800) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x3a012, r0, 0x0) [ 2862.477990] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2862.477996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2862.478001] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2862.486681] FAULT_INJECTION: forcing a failure. [ 2862.486681] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.554563] CPU: 0 PID: 21418 Comm: syz-executor.5 Not tainted 4.14.218-syzkaller #0 [ 2862.562489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2862.571846] Call Trace: [ 2862.574437] dump_stack+0x1b2/0x281 [ 2862.578092] should_fail.cold+0x10a/0x149 [ 2862.582254] should_failslab+0xd6/0x130 [ 2862.586273] kmem_cache_alloc+0x28e/0x3c0 [ 2862.590427] __split_vma+0xc8/0x6c0 [ 2862.594056] do_munmap+0x25b/0xc30 [ 2862.597594] mmap_region+0x217/0x1220 [ 2862.601398] do_mmap+0x5b3/0xcb0 [ 2862.604768] vm_mmap_pgoff+0x14e/0x1a0 [ 2862.608655] ? vma_is_stack_for_current+0xb0/0xb0 [ 2862.613493] ? __fget+0x225/0x360 [ 2862.616968] SyS_mmap_pgoff+0x249/0x510 [ 2862.620955] ? find_mergeable_anon_vma+0x230/0x230 [ 2862.625886] ? __do_page_fault+0x159/0xad0 [ 2862.632562] ? do_syscall_64+0x4c/0x640 [ 2862.636517] ? align_vdso_addr+0x250/0x250 [ 2862.640749] do_syscall_64+0x1d5/0x640 [ 2862.644619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2862.649787] RIP: 0033:0x465b09 21:43:45 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) 21:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x3a012, r0, 0x0) 21:43:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, 0x12, r0, 0x0) 21:43:45 executing program 0 (fault-call:1 fault-nth:7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2862.652954] RSP: 002b:00007f95760e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2862.660648] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2862.668099] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2862.675389] RBP: 00007f95760e81d0 R08: 0000000000000003 R09: 0000000000000000 [ 2862.682658] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2862.689929] R13: 00007ffcf3422e8f R14: 00007f95760e8300 R15: 0000000000022000 [ 2862.773759] FAULT_INJECTION: forcing a failure. [ 2862.773759] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.783058] FAULT_INJECTION: forcing a failure. [ 2862.783058] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.785170] CPU: 1 PID: 21445 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2862.804117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2862.813489] Call Trace: [ 2862.816087] dump_stack+0x1b2/0x281 [ 2862.819699] should_fail.cold+0x10a/0x149 [ 2862.823835] should_failslab+0xd6/0x130 [ 2862.827790] kmem_cache_alloc_node_trace+0x58/0x400 [ 2862.832790] __kmalloc_node_track_caller+0x38/0x70 [ 2862.837701] __alloc_skb+0x96/0x510 [ 2862.841311] create_monitor_event+0x65a/0x800 [ 2862.845785] hci_sock_bind+0x5c5/0x1170 [ 2862.849739] ? hci_sock_ioctl+0x690/0x690 [ 2862.853868] ? security_socket_bind+0x83/0xb0 [ 2862.858344] SyS_bind+0x174/0x1f0 [ 2862.862732] ? SyS_socketpair+0x480/0x480 [ 2862.866860] ? wait_for_completion_io+0x10/0x10 [ 2862.871508] ? vfs_write+0x319/0x4d0 [ 2862.875201] ? fput+0xb/0x140 [ 2862.878286] ? SyS_write+0x14d/0x210 [ 2862.881979] ? SyS_read+0x210/0x210 [ 2862.885585] ? __do_page_fault+0x159/0xad0 [ 2862.889817] ? do_syscall_64+0x4c/0x640 [ 2862.893777] ? SyS_socketpair+0x480/0x480 [ 2862.898689] do_syscall_64+0x1d5/0x640 [ 2862.902561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2862.907729] RIP: 0033:0x465b09 [ 2862.910897] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:43:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x3a012, r0, 0x0) 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x168, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x168}}, 0x0) [ 2862.918584] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2862.925838] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2862.933089] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2862.941206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2862.948468] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2862.955744] CPU: 0 PID: 21446 Comm: syz-executor.5 Not tainted 4.14.218-syzkaller #0 [ 2862.963640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2862.973001] Call Trace: [ 2862.975607] dump_stack+0x1b2/0x281 [ 2862.979243] should_fail.cold+0x10a/0x149 [ 2862.983415] should_failslab+0xd6/0x130 [ 2862.987406] kmem_cache_alloc+0x40/0x3c0 [ 2862.993044] anon_vma_clone+0xe0/0x5b0 [ 2862.996948] __split_vma+0x282/0x6c0 [ 2863.000674] do_munmap+0x25b/0xc30 [ 2863.004222] mmap_region+0x217/0x1220 [ 2863.008030] do_mmap+0x5b3/0xcb0 [ 2863.011436] vm_mmap_pgoff+0x14e/0x1a0 [ 2863.015357] ? vma_is_stack_for_current+0xb0/0xb0 [ 2863.020200] ? __fget+0x225/0x360 21:43:46 executing program 0 (fault-call:1 fault-nth:8): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x880) [ 2863.023658] SyS_mmap_pgoff+0x249/0x510 [ 2863.027645] ? find_mergeable_anon_vma+0x230/0x230 [ 2863.032579] ? __do_page_fault+0x159/0xad0 [ 2863.036819] ? do_syscall_64+0x4c/0x640 [ 2863.040804] ? align_vdso_addr+0x250/0x250 [ 2863.045047] do_syscall_64+0x1d5/0x640 [ 2863.049546] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2863.054821] RIP: 0033:0x465b09 [ 2863.058032] RSP: 002b:00007f95760e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2863.065828] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 21:43:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xa8}}, 0x0) [ 2863.073188] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2863.080459] RBP: 00007f95760e81d0 R08: 0000000000000003 R09: 0000000000000000 [ 2863.087730] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2863.095001] R13: 00007ffcf3422e8f R14: 00007f95760e8300 R15: 0000000000022000 [ 2863.149897] FAULT_INJECTION: forcing a failure. [ 2863.149897] name failslab, interval 1, probability 0, space 0, times 0 [ 2863.161659] CPU: 1 PID: 21461 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2863.169556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2863.178910] Call Trace: [ 2863.181515] dump_stack+0x1b2/0x281 [ 2863.185154] should_fail.cold+0x10a/0x149 [ 2863.189316] should_failslab+0xd6/0x130 [ 2863.193302] kmem_cache_alloc_node+0x54/0x410 [ 2863.197811] __alloc_skb+0x5c/0x510 [ 2863.201446] create_monitor_event+0x7e/0x800 [ 2863.205861] hci_sock_bind+0xb0f/0x1170 [ 2863.210893] ? hci_sock_ioctl+0x690/0x690 [ 2863.215055] ? security_socket_bind+0x83/0xb0 [ 2863.219555] SyS_bind+0x174/0x1f0 [ 2863.223014] ? SyS_socketpair+0x480/0x480 [ 2863.229860] ? wait_for_completion_io+0x10/0x10 [ 2863.234539] ? vfs_write+0x319/0x4d0 [ 2863.238262] ? fput+0xb/0x140 [ 2863.241374] ? SyS_write+0x14d/0x210 [ 2863.245092] ? SyS_read+0x210/0x210 21:43:46 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x10, r0, 0x0) 21:43:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xa8}}, 0x0) [ 2863.248720] ? __do_page_fault+0x159/0xad0 [ 2863.252972] ? do_syscall_64+0x4c/0x640 [ 2863.256951] ? SyS_socketpair+0x480/0x480 [ 2863.261106] do_syscall_64+0x1d5/0x640 [ 2863.265008] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2863.270227] RIP: 0033:0x465b09 [ 2863.273416] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2863.281128] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2863.288408] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x10, r0, 0x0) 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:46 executing program 0 (fault-call:1 fault-nth:9): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2863.295684] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2863.298975] FAULT_INJECTION: forcing a failure. [ 2863.298975] name failslab, interval 1, probability 0, space 0, times 0 [ 2863.302951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2863.302957] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2863.387769] FAULT_INJECTION: forcing a failure. [ 2863.387769] name failslab, interval 1, probability 0, space 0, times 0 [ 2863.399450] CPU: 1 PID: 21478 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2863.407343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2863.416702] Call Trace: [ 2863.419300] dump_stack+0x1b2/0x281 [ 2863.422968] should_fail.cold+0x10a/0x149 [ 2863.427129] should_failslab+0xd6/0x130 [ 2863.431118] kmem_cache_alloc_node_trace+0x58/0x400 [ 2863.436152] __kmalloc_node_track_caller+0x38/0x70 [ 2863.441096] __alloc_skb+0x96/0x510 [ 2863.444740] create_monitor_event+0x7e/0x800 [ 2863.449154] hci_sock_bind+0xb0f/0x1170 [ 2863.453130] ? hci_sock_ioctl+0x690/0x690 [ 2863.457287] ? security_socket_bind+0x83/0xb0 [ 2863.461864] SyS_bind+0x174/0x1f0 [ 2863.465313] ? SyS_socketpair+0x480/0x480 [ 2863.469459] ? wait_for_completion_io+0x10/0x10 [ 2863.474123] ? vfs_write+0x319/0x4d0 [ 2863.477826] ? fput+0xb/0x140 [ 2863.480926] ? SyS_write+0x14d/0x210 [ 2863.484632] ? SyS_read+0x210/0x210 [ 2863.488424] ? __do_page_fault+0x159/0xad0 [ 2863.492657] ? do_syscall_64+0x4c/0x640 [ 2863.496629] ? SyS_socketpair+0x480/0x480 [ 2863.500781] do_syscall_64+0x1d5/0x640 [ 2863.504708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2863.509988] RIP: 0033:0x465b09 [ 2863.513168] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2863.520891] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2863.528162] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x143200) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000080)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x1432c0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000002c0)={0xe, 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0x7, 0x14, @loopback, @remote, 0x7, 0x8, 0x7, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@remote, @in6=@initdev}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000000c0)={0xa}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000a00)=0xe8) 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xa8}}, 0x0) [ 2863.535438] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2863.542707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2863.549980] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2863.576564] CPU: 0 PID: 21469 Comm: syz-executor.5 Not tainted 4.14.218-syzkaller #0 [ 2863.584484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2863.593846] Call Trace: [ 2863.596448] dump_stack+0x1b2/0x281 [ 2863.600179] should_fail.cold+0x10a/0x149 [ 2863.604354] should_failslab+0xd6/0x130 [ 2863.608332] kmem_cache_alloc+0x28e/0x3c0 [ 2863.612494] mmap_region+0x7c1/0x1220 [ 2863.616315] do_mmap+0x5b3/0xcb0 [ 2863.619697] vm_mmap_pgoff+0x14e/0x1a0 [ 2863.623594] ? vma_is_stack_for_current+0xb0/0xb0 [ 2863.628442] ? __fget+0x225/0x360 [ 2863.631904] SyS_mmap_pgoff+0x249/0x510 [ 2863.635892] ? find_mergeable_anon_vma+0x230/0x230 [ 2863.641603] ? __do_page_fault+0x159/0xad0 [ 2863.645841] ? do_syscall_64+0x4c/0x640 [ 2863.649848] ? align_vdso_addr+0x250/0x250 [ 2863.654203] do_syscall_64+0x1d5/0x640 [ 2863.658138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2863.663306] RIP: 0033:0x465b09 [ 2863.666473] RSP: 002b:00007f95760e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2863.674172] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2863.681535] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 21:43:46 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x10, r0, 0x0) 21:43:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x800000, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) 21:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:46 executing program 0 (fault-call:1 fault-nth:10): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2863.688807] RBP: 00007f95760e81d0 R08: 0000000000000003 R09: 0000000000000000 [ 2863.696074] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2863.703333] R13: 00007ffcf3422e8f R14: 00007f95760e8300 R15: 0000000000022000 21:43:46 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, 0xffffffffffffffff, 0x0) 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @exit, @jmp={0x5, 0x1, 0x0, 0x1, 0xa, 0xffffffffffffffa8, 0x1}, @call={0x85, 0x0, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0x5, 0x8, 0x4, 0x40, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xc11}, @initr0={0x18, 0x0, 0x0, 0x0, 0x926, 0x0, 0x0, 0x0, 0x1}, @generic={0xac, 0x0, 0x1, 0x3, 0x9}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x60, &(0x7f00000000c0)=""/96, 0x41000, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x7, 0xe1dc, 0x3}, 0x10}, 0x78) [ 2863.774233] FAULT_INJECTION: forcing a failure. [ 2863.774233] name failslab, interval 1, probability 0, space 0, times 0 [ 2863.785615] CPU: 0 PID: 21501 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2863.794287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2863.803653] Call Trace: [ 2863.806249] dump_stack+0x1b2/0x281 [ 2863.809892] should_fail.cold+0x10a/0x149 [ 2863.814056] should_failslab+0xd6/0x130 [ 2863.818045] kmem_cache_alloc_node+0x54/0x410 21:43:47 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, 0xffffffffffffffff, 0x0) [ 2863.822548] __alloc_skb+0x5c/0x510 [ 2863.826185] create_monitor_event+0x3a1/0x800 [ 2863.830687] hci_sock_bind+0x674/0x1170 [ 2863.834666] ? hci_sock_ioctl+0x690/0x690 [ 2863.838820] ? security_socket_bind+0x83/0xb0 [ 2863.843335] SyS_bind+0x174/0x1f0 [ 2863.846801] ? SyS_socketpair+0x480/0x480 [ 2863.850951] ? wait_for_completion_io+0x10/0x10 [ 2863.855623] ? vfs_write+0x319/0x4d0 [ 2863.859338] ? fput+0xb/0x140 [ 2863.862444] ? SyS_write+0x14d/0x210 [ 2863.866175] ? SyS_read+0x210/0x210 [ 2863.869808] ? __do_page_fault+0x159/0xad0 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7ffffffe, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x14, r0, 0x2000000) 21:43:47 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x3a012, 0xffffffffffffffff, 0x0) [ 2863.874049] ? do_syscall_64+0x4c/0x640 [ 2863.878027] ? SyS_socketpair+0x480/0x480 [ 2863.882182] do_syscall_64+0x1d5/0x640 [ 2863.886081] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2863.891363] RIP: 0033:0x465b09 [ 2863.894549] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2863.902713] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2863.910071] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2863.917342] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 21:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0x3, &(0x7f0000000000)="a00e67279d75d13db21ce78c3404800ede0150c628ea16751cd0e03467cb8427e3d0"}) 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000b, 0x10010, r0, 0x0) 21:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x0, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) [ 2863.924615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2863.931908] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:47 executing program 0 (fault-call:1 fault-nth:11): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:47 executing program 2: syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xea}, "5f82bfbc1dcbb2bda5cd0f6e07fcb905652a3f91ce4f68d20b72dc2f7c15cd5a21140aae8697051d16685d24399e4a21d27b8b7f42b08bf2510ef530aeb55d1bc1deabe99efd246916d6e2d806429dd8bf7bdcdcea03e3cdeea739e31b2db8963e7b05a141892d44929e99a10712ab40d729e95ba9c6312e2b3b76f5d2ad0a256a581561e0a43347f0c2841a6fa83ab0ad2dc1c4749b4d1a74a65b3ee9ea24a5e55ee9cc6c2de713718fb36aa88fd0f1068d09e503a909cedd93e55120fe4beded2155a864e22dcd35d6120fca61203d53881a3ca5aefb88f1fcb5513f81062eba632505791a3c70eccb"}, 0xee) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x305000, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fddbdf256b0000000c00990003000000410000000a00060008021100000000000a00060008021100000100000a001a0008021100000100001724915e140aa59940b700877552b8a7c1c528010449581ce61aac90e304a2e76fceb90f6e4b539c04"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r2 = socket(0x3, 0x3, 0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000040)=0x6, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff113, 0x88000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f00000002c0)={0xc, 0x1}) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000180)={0x1}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0x2}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2864.037885] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2864.053826] FAULT_INJECTION: forcing a failure. [ 2864.053826] name failslab, interval 1, probability 0, space 0, times 0 [ 2864.065166] CPU: 0 PID: 21530 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2864.073063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.082422] Call Trace: 21:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x160, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x160}}, 0x0) [ 2864.085034] dump_stack+0x1b2/0x281 [ 2864.088678] should_fail.cold+0x10a/0x149 [ 2864.092857] should_failslab+0xd6/0x130 [ 2864.096843] kmem_cache_alloc_node_trace+0x58/0x400 [ 2864.101873] __kmalloc_node_track_caller+0x38/0x70 [ 2864.106817] __alloc_skb+0x96/0x510 [ 2864.110452] create_monitor_event+0x3a1/0x800 [ 2864.114954] hci_sock_bind+0x674/0x1170 [ 2864.118941] ? hci_sock_ioctl+0x690/0x690 [ 2864.123103] ? security_socket_bind+0x83/0xb0 [ 2864.127610] SyS_bind+0x174/0x1f0 [ 2864.131074] ? SyS_socketpair+0x480/0x480 21:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x158, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x158}}, 0x0) [ 2864.135226] ? wait_for_completion_io+0x10/0x10 [ 2864.139904] ? vfs_write+0x319/0x4d0 [ 2864.143618] ? fput+0xb/0x140 [ 2864.146723] ? SyS_write+0x14d/0x210 [ 2864.150439] ? SyS_read+0x210/0x210 [ 2864.154072] ? __do_page_fault+0x159/0xad0 [ 2864.158310] ? do_syscall_64+0x4c/0x640 [ 2864.162286] ? SyS_socketpair+0x480/0x480 [ 2864.166439] do_syscall_64+0x1d5/0x640 [ 2864.170333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2864.175520] RIP: 0033:0x465b09 [ 2864.178730] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:43:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x40, 0x30, 0x2, 0x4717, 0xc7, 0x5, &(0x7f0000000040)="c7bb53ee5c2868847fb25adf29b0e85d1fcd3e9bcb0bb7315cbdb03d5e7e90477ab7cfe86a0b20a28297eb083827696e42536c33c9c84aed90dcacada81a5959d3e401a77f0f50ab5a645c4f322c4d902c4eb162bdf29702c016da5b07d5aa1ccf76d7d82d92c0e23ba4454660874bef49b66895950ce38f50f15f16c91361d1d4a89445d9191038d2341697f6567bb5be5a945c35526181d8edf31e8dabd8c07f59729de0ee433b6293681e619e0d1c1dfb2eb322a006fc66b638e4ddc103bda73299a75b13c7"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x6}) 21:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x8000000000000000) [ 2864.186445] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2864.193716] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2864.200989] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2864.208262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2864.215623] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:47 executing program 0 (fault-call:1 fault-nth:12): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x150}}, 0x0) 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x93, 0x600080) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0x30, 0x80, 0xfffd, 0x1a1, 0xa, &(0x7f0000000100)="b9712ae1bb06d36e358f9d6e75b14141986c585ba8a794068b12e3c18c1e20214c6207024001cc5d36638ab91aa0af1bbc1805b552d791e9b10d90f3462fca4cdc6d284d58105974f3ad5bb516d88a2244e9c8872ea4e0cb960ba8c4fc63e6ac5be7f7d7167d1acc0a59ed53f5e59e889e9cf62667ef555dc5ddd4ab6407444e5a7525a71c164d750e734f8e5eb80f304e870f56590495b37046af6b1ef06ff994c72661da0edaf38c7abc79b512ce1b0f01d9057557d09fa53da807292e931b7b6d031f2eb24bf0454016e014e4b4d1c152f87192b995a2f0918513e21e1a6a94715bfdab163b6376af556da7981e8d776085c370fb32f909ce6006ca863d4be5b3d78bbbee4f42422c91190a2647b578ad6e33661ba09bd6c69425edfce00fecb8fe8c024998e45455a1711a9f2ba46f6e16c4d83cbd0eb7954d7306dca91b191cc1a87590c115fe271746f6f4bafa238a822bbcbb571c35e364ca957270d2190ab08570d9db957ae381a9932339e2b18538d8d06f4217e17d99e7f8f2a0832a7d4c5b7223436a709f90b121da9a5e082c3bf9cbdb217703dd20f0f5c6f33500"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000080)={0x9, &(0x7f0000000040)="b9c073c7840f5d87ce4ba7970fce8ec6e8f61d8e1660b464b6a612435ec0908e"}) 21:43:47 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x800) recvmsg$can_bcm(r0, &(0x7f0000002680)={&(0x7f0000000140)=@un=@abs, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/207, 0xcf}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002600)=""/67, 0x43}, 0x100) connect(0xffffffffffffffff, &(0x7f00000026c0)=@rc={0x1f, @any, 0x3f}, 0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) [ 2864.266370] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x8, &(0x7f0000000080)="cc0b2167a5c0b9"}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={r2, r3/1000+10000}, 0x10) 21:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x18, 0x55, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) [ 2864.339619] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2864.418173] FAULT_INJECTION: forcing a failure. [ 2864.418173] name failslab, interval 1, probability 0, space 0, times 0 [ 2864.429673] CPU: 1 PID: 21568 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2864.437565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.443015] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2864.446920] Call Trace: [ 2864.446941] dump_stack+0x1b2/0x281 [ 2864.446959] should_fail.cold+0x10a/0x149 [ 2864.446970] should_failslab+0xd6/0x130 [ 2864.446983] kmem_cache_alloc_node+0x54/0x410 [ 2864.446997] __alloc_skb+0x5c/0x510 [ 2864.475290] create_monitor_event+0x3a1/0x800 [ 2864.485195] hci_sock_bind+0x674/0x1170 [ 2864.489197] ? hci_sock_ioctl+0x690/0x690 [ 2864.493357] ? security_socket_bind+0x83/0xb0 [ 2864.497883] SyS_bind+0x174/0x1f0 [ 2864.501345] ? SyS_socketpair+0x480/0x480 [ 2864.504571] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2864.505488] ? wait_for_completion_io+0x10/0x10 21:43:47 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, &(0x7f0000000140)=0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000e, 0x12, r1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80, 0x2000) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x85, 0x82100) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000000)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000100)={0x3, 0x8}) 21:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x18, 0x55, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000870090755d00000000000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = accept$alg(r1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000200)={'tunl0\x00', {0x2, 0x0, @multicast1}}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x200080e0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r2, 0x0) [ 2864.505500] ? vfs_write+0x319/0x4d0 [ 2864.505511] ? fput+0xb/0x140 [ 2864.505521] ? SyS_write+0x14d/0x210 [ 2864.505530] ? SyS_read+0x210/0x210 [ 2864.505546] ? __do_page_fault+0x159/0xad0 [ 2864.534813] ? do_syscall_64+0x4c/0x640 [ 2864.538797] ? SyS_socketpair+0x480/0x480 [ 2864.542949] do_syscall_64+0x1d5/0x640 [ 2864.547118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2864.552397] RIP: 0033:0x465b09 [ 2864.555598] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:43:47 executing program 0 (fault-call:1 fault-nth:13): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x18, 0x55, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80000) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x38}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) 21:43:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x4000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400000) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000080)={0x9, 0x1000}) 21:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x150}}, 0x0) [ 2864.563309] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2864.570586] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2864.577870] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2864.585144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2864.592423] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:47 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) [ 2864.670574] FAULT_INJECTION: forcing a failure. [ 2864.670574] name failslab, interval 1, probability 0, space 0, times 0 [ 2864.683646] CPU: 0 PID: 21600 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2864.691540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.700898] Call Trace: [ 2864.703495] dump_stack+0x1b2/0x281 [ 2864.707135] should_fail.cold+0x10a/0x149 [ 2864.711291] should_failslab+0xd6/0x130 [ 2864.715358] kmem_cache_alloc_node_trace+0x58/0x400 21:43:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) 21:43:47 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x0, 0x2) [ 2864.720383] __kmalloc_node_track_caller+0x38/0x70 [ 2864.725494] __alloc_skb+0x96/0x510 [ 2864.729167] create_monitor_event+0x3a1/0x800 [ 2864.733686] hci_sock_bind+0x674/0x1170 [ 2864.737665] ? hci_sock_ioctl+0x690/0x690 [ 2864.741820] ? security_socket_bind+0x83/0xb0 [ 2864.746379] SyS_bind+0x174/0x1f0 [ 2864.749846] ? SyS_socketpair+0x480/0x480 [ 2864.753998] ? wait_for_completion_io+0x10/0x10 [ 2864.758668] ? vfs_write+0x319/0x4d0 [ 2864.762386] ? fput+0xb/0x140 [ 2864.765489] ? SyS_write+0x14d/0x210 [ 2864.769205] ? SyS_read+0x210/0x210 [ 2864.772841] ? __do_page_fault+0x159/0xad0 [ 2864.777076] ? do_syscall_64+0x4c/0x640 [ 2864.781052] ? SyS_socketpair+0x480/0x480 [ 2864.785210] do_syscall_64+0x1d5/0x640 [ 2864.789110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2864.794301] RIP: 0033:0x465b09 [ 2864.797491] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2864.805204] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2864.812515] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 read$char_raw(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00"/35840], 0x8c00) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000091) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) ioctl$CHAR_RAW_DISCARD(r1, 0x1277, &(0x7f0000000080)=0x5) r3 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 21:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x150}}, 0x0) 21:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x158, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x158}}, 0x0) [ 2864.819790] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2864.827065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2864.834341] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:48 executing program 0 (fault-call:1 fault-nth:14): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:48 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x42200) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x50, r1, 0x0) [ 2864.877006] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2864.945794] FAULT_INJECTION: forcing a failure. [ 2864.945794] name failslab, interval 1, probability 0, space 0, times 0 [ 2864.957175] CPU: 0 PID: 21630 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2864.965165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.974524] Call Trace: [ 2864.977123] dump_stack+0x1b2/0x281 [ 2864.980772] should_fail.cold+0x10a/0x149 [ 2864.984932] should_failslab+0xd6/0x130 [ 2864.988920] kmem_cache_alloc_node+0x54/0x410 [ 2864.993431] __alloc_skb+0x5c/0x510 [ 2864.997084] create_monitor_event+0x65a/0x800 [ 2865.001587] hci_sock_bind+0x5c5/0x1170 [ 2865.005569] ? hci_sock_ioctl+0x690/0x690 [ 2865.009735] ? security_socket_bind+0x83/0xb0 [ 2865.014263] SyS_bind+0x174/0x1f0 [ 2865.017839] ? SyS_socketpair+0x480/0x480 [ 2865.022185] ? wait_for_completion_io+0x10/0x10 [ 2865.026856] ? vfs_write+0x319/0x4d0 [ 2865.030577] ? fput+0xb/0x140 [ 2865.033686] ? SyS_write+0x14d/0x210 [ 2865.037416] ? SyS_read+0x210/0x210 [ 2865.041049] ? __do_page_fault+0x159/0xad0 21:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}}, 0x0) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}}, 0x0) 21:43:48 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2865.045286] ? do_syscall_64+0x4c/0x640 [ 2865.049273] ? SyS_socketpair+0x480/0x480 [ 2865.053428] do_syscall_64+0x1d5/0x640 [ 2865.057335] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.065308] RIP: 0033:0x465b09 [ 2865.068588] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2865.076668] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2865.083971] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}}, 0x0) 21:43:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x40f) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) socketpair(0xa, 0x800, 0x8, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x2e7a, 0x1a, [{0x3}, {0xa, 0x1}, {0xd}, {0xf}, {0x6}, {0xb}, {0x5}, {}, {0x7}, {0xb}, {0xf}, {0x4}, {0xc}, {0xc, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {0x1}, {0x8, 0x1}, {}, {0xe}, {0xb}, {0x7}, {0x6}, {0x5, 0x1}]}) [ 2865.091424] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.099454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2865.106731] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2865.113890] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, 0x38}}, 0x880) 21:43:48 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:48 executing program 0 (fault-call:1 fault-nth:15): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x10200, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0x3, 0x1, 0x4, 0xe, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map={0x18, 0x7, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x18}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x20, 0x36, &(0x7f0000000200)=""/54, 0x41100, 0x12, [], r3, 0x22, r4, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x2, 0x2}, 0x10, 0xffffffffffffffff, r5}, 0x78) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x158, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x158}}, 0x0) 21:43:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2865.215892] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2865.245401] FAULT_INJECTION: forcing a failure. [ 2865.245401] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.257927] CPU: 0 PID: 21654 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 21:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, 0x38}}, 0x0) [ 2865.266165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.275524] Call Trace: [ 2865.278116] dump_stack+0x1b2/0x281 [ 2865.281760] should_fail.cold+0x10a/0x149 [ 2865.285934] should_failslab+0xd6/0x130 [ 2865.289916] kmem_cache_alloc_node_trace+0x58/0x400 [ 2865.294958] __kmalloc_node_track_caller+0x38/0x70 [ 2865.299899] __alloc_skb+0x96/0x510 [ 2865.303537] create_monitor_event+0x65a/0x800 [ 2865.308184] hci_sock_bind+0x5c5/0x1170 [ 2865.312182] ? hci_sock_ioctl+0x690/0x690 21:43:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2865.314417] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 2865.316363] ? security_socket_bind+0x83/0xb0 [ 2865.316376] SyS_bind+0x174/0x1f0 [ 2865.316387] ? SyS_socketpair+0x480/0x480 [ 2865.316399] ? wait_for_completion_io+0x10/0x10 [ 2865.316412] ? vfs_write+0x319/0x4d0 [ 2865.316423] ? fput+0xb/0x140 [ 2865.316433] ? SyS_write+0x14d/0x210 [ 2865.316441] ? SyS_read+0x210/0x210 [ 2865.316451] ? __do_page_fault+0x159/0xad0 [ 2865.316461] ? do_syscall_64+0x4c/0x640 [ 2865.316470] ? SyS_socketpair+0x480/0x480 21:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 21:43:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2865.316479] do_syscall_64+0x1d5/0x640 [ 2865.316495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.316503] RIP: 0033:0x465b09 [ 2865.316508] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2865.316518] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2865.316523] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2865.316532] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.407548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:43:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0x2753, 0x1c, [{0xf}, {0x4, 0x1}, {0x1, 0x1}, {0xd}, {0x2, 0x1}, {0x2}, {0xd, 0x1}, {0xa}, {0x5, 0x1}, {0x8, 0x1}, {0xf}, {0x0, 0x1}, {0x7}, {0x9, 0x1}, {0x5}, {0xb, 0x1}, {0xa}, {0xe}, {0x3}, {0x4, 0x1}, {0xd}, {0x8, 0x1}, {0x6, 0x1}, {0x2}, {0x0, 0x1}, {0x7, 0x1}, {0xe}, {0x1}]}) [ 2865.414824] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2865.436334] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:43:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40442) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x6}) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x158, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x158}}, 0x0) 21:43:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x158, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x158}}, 0x0) 21:43:48 executing program 0 (fault-call:1 fault-nth:16): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x158, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x158}}, 0x0) [ 2865.586847] FAULT_INJECTION: forcing a failure. [ 2865.586847] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.598190] CPU: 1 PID: 21687 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2865.606188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.615546] Call Trace: [ 2865.618141] dump_stack+0x1b2/0x281 [ 2865.621781] should_fail.cold+0x10a/0x149 [ 2865.625938] should_failslab+0xd6/0x130 [ 2865.629920] kmem_cache_alloc_node+0x54/0x410 [ 2865.634428] __alloc_skb+0x5c/0x510 [ 2865.638063] create_monitor_event+0x7e/0x800 [ 2865.642478] hci_sock_bind+0xb0f/0x1170 [ 2865.646461] ? hci_sock_ioctl+0x690/0x690 [ 2865.650620] ? security_socket_bind+0x83/0xb0 [ 2865.655218] SyS_bind+0x174/0x1f0 [ 2865.658679] ? SyS_socketpair+0x480/0x480 [ 2865.662831] ? wait_for_completion_io+0x10/0x10 [ 2865.667504] ? vfs_write+0x319/0x4d0 [ 2865.671222] ? fput+0xb/0x140 [ 2865.674327] ? SyS_write+0x14d/0x210 [ 2865.678127] ? SyS_read+0x210/0x210 [ 2865.681766] ? __do_page_fault+0x159/0xad0 21:43:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x610800, 0x0) ioctl$CHAR_RAW_SECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x45a6eec8) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x10200, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0x3, 0x1, 0x4, 0xe, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map={0x18, 0x7, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x18}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x20, 0x36, &(0x7f0000000200)=""/54, 0x41100, 0x12, [], r3, 0x22, r4, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x2, 0x2}, 0x10, 0xffffffffffffffff, r5}, 0x78) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}}, 0x0) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}}, 0x0) [ 2865.686009] ? do_syscall_64+0x4c/0x640 [ 2865.689577] Bearer rejected, not supported in standalone mode [ 2865.689989] ? SyS_socketpair+0x480/0x480 [ 2865.690003] do_syscall_64+0x1d5/0x640 [ 2865.690019] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.710508] RIP: 0033:0x465b09 [ 2865.713693] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2865.721435] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2865.728715] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x50}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008094) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x10200, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0x3, 0x1, 0x4, 0xe, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map={0x18, 0x7, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x18}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x20, 0x36, &(0x7f0000000200)=""/54, 0x41100, 0x12, [], r3, 0x22, r4, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x2, 0x2}, 0x10, 0xffffffffffffffff, r5}, 0x78) 21:43:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}}, 0x0) 21:43:49 executing program 0 (fault-call:1 fault-nth:17): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2865.736078] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.742839] Bearer rejected, not supported in standalone mode [ 2865.743346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2865.743353] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000140)={0x0, "eb8b6fd664506cf63a0b8838577793c6676b74b335d1eefcd33a3d676678199372ae231042ccbbe6e8e050750de8db68f4e1a12c8cc9f91743b0ac2e1888e7fb", 0x28}, 0x48, r0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0)) keyctl$unlink(0x9, 0x0, r5) keyctl$get_persistent(0x16, 0xee00, r5) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x12, r1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7d2, 0x200041) [ 2865.870892] FAULT_INJECTION: forcing a failure. [ 2865.870892] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.872334] Bearer rejected, not supported in standalone mode [ 2865.882374] CPU: 1 PID: 21712 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2865.882382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.882385] Call Trace: [ 2865.882402] dump_stack+0x1b2/0x281 [ 2865.882419] should_fail.cold+0x10a/0x149 21:43:49 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x158, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x158}}, 0x0) [ 2865.882433] should_failslab+0xd6/0x130 [ 2865.921888] kmem_cache_alloc_node_trace+0x58/0x400 [ 2865.926927] __kmalloc_node_track_caller+0x38/0x70 [ 2865.931895] __alloc_skb+0x96/0x510 [ 2865.935542] create_monitor_event+0x7e/0x800 [ 2865.939978] hci_sock_bind+0xb0f/0x1170 [ 2865.943968] ? hci_sock_ioctl+0x690/0x690 [ 2865.948122] ? security_socket_bind+0x83/0xb0 [ 2865.952629] SyS_bind+0x174/0x1f0 [ 2865.956087] ? SyS_socketpair+0x480/0x480 [ 2865.960243] ? wait_for_completion_io+0x10/0x10 [ 2865.964955] ? vfs_write+0x319/0x4d0 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x150, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x150}}, 0x0) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x140, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x140}}, 0x0) [ 2865.968673] ? fput+0xb/0x140 [ 2865.971780] ? SyS_write+0x14d/0x210 [ 2865.975500] ? SyS_read+0x210/0x210 [ 2865.979130] ? __do_page_fault+0x159/0xad0 [ 2865.983369] ? do_syscall_64+0x4c/0x640 [ 2865.987351] ? SyS_socketpair+0x480/0x480 [ 2865.991505] do_syscall_64+0x1d5/0x640 [ 2865.995404] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2866.000630] RIP: 0033:0x465b09 [ 2866.003814] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2866.011531] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)={0x0, 0x1}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:49 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1cfc3b549e6b874b, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x2) 21:43:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x10200, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0x3, 0x1, 0x4, 0xe, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map={0x18, 0x7, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x18}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x20, 0x36, &(0x7f0000000200)=""/54, 0x41100, 0x12, [], r3, 0x22, r4, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x2, 0x2}, 0x10, 0xffffffffffffffff, r5}, 0x78) 21:43:49 executing program 0 (fault-call:1 fault-nth:18): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2866.018806] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2866.026091] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.035813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2866.043088] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x140, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x140}}, 0x0) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x105100, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 2866.150573] FAULT_INJECTION: forcing a failure. [ 2866.150573] name failslab, interval 1, probability 0, space 0, times 0 [ 2866.162106] CPU: 1 PID: 21738 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2866.169998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.179361] Call Trace: [ 2866.181973] dump_stack+0x1b2/0x281 [ 2866.185610] should_fail.cold+0x10a/0x149 [ 2866.189770] should_failslab+0xd6/0x130 [ 2866.193761] kmem_cache_alloc_node+0x54/0x410 21:43:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 2866.198274] __alloc_skb+0x5c/0x510 [ 2866.202183] create_monitor_event+0x3a1/0x800 [ 2866.206857] hci_sock_bind+0x674/0x1170 [ 2866.210839] ? hci_sock_ioctl+0x690/0x690 [ 2866.215007] ? security_socket_bind+0x83/0xb0 [ 2866.219508] SyS_bind+0x174/0x1f0 [ 2866.222968] ? SyS_socketpair+0x480/0x480 [ 2866.227130] ? wait_for_completion_io+0x10/0x10 [ 2866.231806] ? vfs_write+0x319/0x4d0 [ 2866.235529] ? fput+0xb/0x140 [ 2866.238644] ? SyS_write+0x14d/0x210 [ 2866.242408] ? SyS_read+0x210/0x210 [ 2866.246073] ? __do_page_fault+0x159/0xad0 21:43:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1843835cc6dbdad96c9b91845f47a46c5334417e3cd2a2aea2142258712a889e680ad658f813b936144214f9529bc99fdc45e557f46307207a31d9de8d778e6a7797de852588deb9a68b0897afff07b2e57fba21f8279c290d952f8252e47d030e073411748128e4bb3e9402e6f8d0ef969a8d8a67d7f38979405bba79004fb62fe4197d0a62c26692065d644f08351dbf0822fb8e731d069917a888aff7633f547d9fa307c9a73d5bec2615d4449186a8b57acd", 0xb4}], 0x1, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf0}}], 0x50}, 0x40000) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 2866.250314] ? do_syscall_64+0x4c/0x640 [ 2866.254291] ? SyS_socketpair+0x480/0x480 [ 2866.258446] do_syscall_64+0x1d5/0x640 [ 2866.263991] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2866.269212] RIP: 0033:0x465b09 [ 2866.272445] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2866.280160] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2866.287432] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:49 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) 21:43:49 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0xc0000, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$CHAR_RAW_PG(r0, 0x1269, &(0x7f0000000040)={0xfcb2, 0x0, 0xc, &(0x7f0000000000)="dae741350a4ab655d9d815e4"}) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 21:43:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x10200, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) 21:43:49 executing program 0 (fault-call:1 fault-nth:19): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x140, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x140}}, 0x0) [ 2866.294713] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.301986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2866.309275] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 21:43:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x8940) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x6, 0x0, &(0x7f00000001c0)="4eaea82032708cbe959a4b0fd9991333d5754954484edfad87725f024015343c03dce354369c9454231d912d766351ce9a64c214d61cf8860185"}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000180)={0x7fffffff, 0x4, 0x5}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000140)={0x6, 0x6f}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000000)) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000080)={0xa5bc, 0xc, [{0xb, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x6}, {0x1}, {0x8}, {0x4}, {0xe}, {0x8, 0x1}, {0xc, 0x1}]}) 21:43:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x3ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, &(0x7f0000000340)=""/102385, 0x18ff1, 0x2, 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x200000000004) [ 2866.430176] FAULT_INJECTION: forcing a failure. [ 2866.430176] name failslab, interval 1, probability 0, space 0, times 0 [ 2866.441693] CPU: 0 PID: 21767 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2866.449585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.458943] Call Trace: [ 2866.461538] dump_stack+0x1b2/0x281 [ 2866.465185] should_fail.cold+0x10a/0x149 [ 2866.469366] should_failslab+0xd6/0x130 [ 2866.473355] kmem_cache_alloc_node_trace+0x58/0x400 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x11c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x11c}}, 0x0) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 2866.478381] __kmalloc_node_track_caller+0x38/0x70 [ 2866.483322] __alloc_skb+0x96/0x510 [ 2866.486964] create_monitor_event+0x3a1/0x800 [ 2866.491516] hci_sock_bind+0x674/0x1170 [ 2866.495497] ? hci_sock_ioctl+0x690/0x690 [ 2866.499649] ? security_socket_bind+0x83/0xb0 [ 2866.504154] SyS_bind+0x174/0x1f0 [ 2866.507615] ? SyS_socketpair+0x480/0x480 [ 2866.511772] ? wait_for_completion_io+0x10/0x10 [ 2866.516454] ? vfs_write+0x319/0x4d0 [ 2866.520178] ? fput+0xb/0x140 [ 2866.523286] ? SyS_write+0x14d/0x210 [ 2866.527008] ? SyS_read+0x210/0x210 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x114, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x114}}, 0x0) [ 2866.530635] ? __do_page_fault+0x159/0xad0 [ 2866.535562] ? do_syscall_64+0x4c/0x640 [ 2866.539538] ? SyS_socketpair+0x480/0x480 [ 2866.543685] do_syscall_64+0x1d5/0x640 [ 2866.547581] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2866.552780] RIP: 0033:0x465b09 [ 2866.555966] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2866.563679] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2866.570978] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x4841) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x102) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000080)) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0xd}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1, @le_create_cis={{0x2064, 0x5}, {0x1, [{0x1, 0x938}]}}}, 0x9) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x10200, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) 21:43:49 executing program 0 (fault-call:1 fault-nth:20): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xe0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xe0}}, 0x0) [ 2866.578259] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.585532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2866.592806] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x10200, 0x0) 21:43:49 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0xd, 0x20, 0x5, 0x0, 0x10000, 0x48820, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffe46, 0x0, @perf_config_ext={0x6, 0x6}, 0x8000, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x80}, r0, 0x2, 0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0xc4c2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$CHAR_RAW_DISCARD(r1, 0x1277, &(0x7f0000000000)=0x4) [ 2866.702148] FAULT_INJECTION: forcing a failure. [ 2866.702148] name failslab, interval 1, probability 0, space 0, times 0 [ 2866.713633] CPU: 1 PID: 21799 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2866.721607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.730975] Call Trace: [ 2866.733572] dump_stack+0x1b2/0x281 [ 2866.737209] should_fail.cold+0x10a/0x149 [ 2866.741362] should_failslab+0xd6/0x130 [ 2866.745434] kmem_cache_alloc_node+0x54/0x410 [ 2866.749936] __alloc_skb+0x5c/0x510 [ 2866.753569] create_monitor_event+0x65a/0x800 [ 2866.758075] hci_sock_bind+0x5c5/0x1170 [ 2866.762065] ? hci_sock_ioctl+0x690/0x690 [ 2866.766497] ? security_socket_bind+0x83/0xb0 [ 2866.771000] SyS_bind+0x174/0x1f0 [ 2866.774577] ? SyS_socketpair+0x480/0x480 [ 2866.780083] ? wait_for_completion_io+0x10/0x10 [ 2866.784736] ? vfs_write+0x319/0x4d0 [ 2866.788429] ? fput+0xb/0x140 [ 2866.791564] ? SyS_write+0x14d/0x210 [ 2866.795265] ? SyS_read+0x210/0x210 [ 2866.798876] ? __do_page_fault+0x159/0xad0 [ 2866.803184] ? do_syscall_64+0x4c/0x640 [ 2866.807146] ? SyS_socketpair+0x480/0x480 [ 2866.811321] do_syscall_64+0x1d5/0x640 [ 2866.815242] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2866.820414] RIP: 0033:0x465b09 [ 2866.823581] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2866.831270] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2866.838889] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2866.846139] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.853390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2866.860649] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:50 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r1, 0x0) socketpair(0x3c, 0x2, 0xa59, &(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x2, 0x8) 21:43:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x3e, 0x2080) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000140)=0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x1f, 0x9, 0x40, 0x9, 0x9c, 0x4, &(0x7f0000000000)="b2a84d594ccc1804dbc60f41db70c5fccd6cf391823f98ba4456c2b0a60b089bed51df7a2b9189849f720c66e0f45ab1e619722ca2a67d82c98ce60de5a68772528595316d31a5b07cba85a5c5259c320078eebd43605d145d6240b877e590f5d260b91c6fe4d9558f58cf416495f7e1e6b7894fa7141a1299a07f280317e6993d633ce13bc81bc24e9cb9752c7b6f408d207eb4462f717321b3a033"}) 21:43:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xe0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xe0}}, 0x0) 21:43:50 executing program 0 (fault-call:1 fault-nth:21): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0xfffffffa, 0x13, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x3d}, 0x700, 0x7800, 0xffff}}) 21:43:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) 21:43:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2867.424115] FAULT_INJECTION: forcing a failure. [ 2867.424115] name failslab, interval 1, probability 0, space 0, times 0 [ 2867.436809] CPU: 1 PID: 21819 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2867.445006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2867.454740] Call Trace: [ 2867.457543] dump_stack+0x1b2/0x281 [ 2867.461316] should_fail.cold+0x10a/0x149 [ 2867.465479] should_failslab+0xd6/0x130 [ 2867.469605] kmem_cache_alloc_node_trace+0x58/0x400 21:43:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x134, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x134}}, 0x0) [ 2867.474668] __kmalloc_node_track_caller+0x38/0x70 [ 2867.479623] __alloc_skb+0x96/0x510 [ 2867.483353] create_monitor_event+0x65a/0x800 [ 2867.487978] hci_sock_bind+0x5c5/0x1170 [ 2867.492056] ? hci_sock_ioctl+0x690/0x690 [ 2867.496367] ? security_socket_bind+0x83/0xb0 [ 2867.501194] SyS_bind+0x174/0x1f0 [ 2867.504663] ? SyS_socketpair+0x480/0x480 [ 2867.508823] ? wait_for_completion_io+0x10/0x10 [ 2867.513502] ? vfs_write+0x319/0x4d0 [ 2867.517219] ? fput+0xb/0x140 [ 2867.520335] ? SyS_write+0x14d/0x210 21:43:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xd8}}, 0x0) 21:43:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xa8}}, 0x0) [ 2867.524057] ? SyS_read+0x210/0x210 [ 2867.527782] ? __do_page_fault+0x159/0xad0 [ 2867.532040] ? do_syscall_64+0x4c/0x640 [ 2867.536046] ? SyS_socketpair+0x480/0x480 [ 2867.540206] do_syscall_64+0x1d5/0x640 [ 2867.544111] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2867.549308] RIP: 0033:0x465b09 [ 2867.552504] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2867.560221] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2867.567507] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) [ 2867.574868] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2867.582251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2867.589536] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:50 executing program 0 (fault-call:1 fault-nth:22): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x88ad, 0xb, [{0x3, 0x1}, {0x3, 0x1}, {0xf, 0x1}, {0x1, 0x1}, {0xa}, {0x5, 0x1}, {0xc}, {0xa}, {0x2, 0x1}, {0x5}, {0x1, 0x1}]}) 21:43:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xa8}}, 0x0) 21:43:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xd8}}, 0x0) 21:43:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x8, 0xc}, {0xfff3, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffa935}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) [ 2867.698729] FAULT_INJECTION: forcing a failure. [ 2867.698729] name failslab, interval 1, probability 0, space 0, times 0 [ 2867.710122] CPU: 0 PID: 21847 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2867.718632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2867.728003] Call Trace: [ 2867.730603] dump_stack+0x1b2/0x281 [ 2867.734461] should_fail.cold+0x10a/0x149 [ 2867.738663] should_failslab+0xd6/0x130 [ 2867.742666] kmem_cache_alloc_node+0x54/0x410 21:43:50 executing program 5: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14ff0300", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2002) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x10000, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000340)={@my=0x1, 0xfff}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000200)) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x9, 0x401, 0x6, @rand_addr=' \x01\x00', @ipv4={[], [], @multicast1}, 0x7, 0x8, 0x10, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0x100, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000, 0x20, 0x2, 0x81}}) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a0049000128bd7000fedbdf250a8080b3fc01c82b0015000008000400", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000240)={0x8001, 0x9}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x0, 0x15, 0x3, 0x1, 0x8c, 0x5, &(0x7f0000000100)="70189d1fdb974189851103b751dd2f873caa371bb280d6cc360ed968cb924da3c55c8c8fb4c5b46be358bf09f67b66a620fb28c21f285ee5b1761ddfe0f9746a9003f78d6917fb1bd38314353567785cb7098759f771335dfa0fc752a040c016ff903cc35151efde1a1c16a9151af9c4312fcd85ce36ba320d689355d1e8f7f7321d08d7ec7f67b173a78d4b"}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "78171425b463063dfcf77c3afb636a246424a1245788a2311b41b1772895544e78c059d756599ecc46731578cd740ca19ed133e14838396be7a92b7529cd428d44467f6e55abbb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x88, 0x5, "8b10d8e4ff9baefd275f8e35047591c2462f9cf669dd67cced54c0be68dc3fd2af45eaa958fef1373c298f90713b59ef2e52ce10ff1fa11d82e26d740c9d20f38a3b2d8b4ed79cec2a64fb3cec6c23ffe940677e131c3b03e05f9d116bcb55b40e7dd09941484a1e593f22455fff1d6d49cc79ad5c2f1b8e798a6c183aad053455079b4d"}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x4) 21:43:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xa8}}, 0x0) 21:43:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 2867.747181] __alloc_skb+0x5c/0x510 [ 2867.750827] create_monitor_event+0x7e/0x800 [ 2867.755258] hci_sock_bind+0xb0f/0x1170 [ 2867.759256] ? hci_sock_ioctl+0x690/0x690 [ 2867.763438] ? security_socket_bind+0x83/0xb0 [ 2867.767956] SyS_bind+0x174/0x1f0 [ 2867.771459] ? SyS_socketpair+0x480/0x480 [ 2867.775614] ? wait_for_completion_io+0x10/0x10 [ 2867.780291] ? vfs_write+0x319/0x4d0 [ 2867.784206] ? fput+0xb/0x140 [ 2867.787325] ? SyS_write+0x14d/0x210 [ 2867.791484] ? SyS_read+0x210/0x210 21:43:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x124, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x124}}, 0x0) [ 2867.795128] ? __do_page_fault+0x159/0xad0 [ 2867.800164] ? do_syscall_64+0x4c/0x640 [ 2867.804149] ? SyS_socketpair+0x480/0x480 [ 2867.808318] do_syscall_64+0x1d5/0x640 [ 2867.812225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2867.817417] RIP: 0033:0x465b09 [ 2867.820609] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2867.828323] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2867.835599] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x400081, 0xe8b00) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000080)={0x7, &(0x7f0000000000)="dab07406511246383a8c85ae3e1ecfa6e7db979217278cdd305f5fa936cc1f3adbee115342cfa08a37c987a37ba2c3fa61013291a0be3661bf6d7ac9dd8ea1e37f59e44c872bd0e004b91024c78ba7052830b025a0c6297c92a8cf9441fda1"}) [ 2867.842875] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2867.850153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2867.857433] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:51 executing program 0 (fault-call:1 fault-nth:23): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x124, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x124}}, 0x0) 21:43:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) r1 = socket(0x18, 0x80000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 21:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xd8}}, 0x0) 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x438e, 0x1a, [{0xa, 0x1}, {0xa}, {0xd}, {0x7, 0x1}, {0xa}, {0x1}, {0xf, 0x1}, {0x2, 0x1}, {0xf, 0x1}, {0xb, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x6}, {0x8}, {0xa, 0x1}, {0xf, 0x1}, {0x6, 0x1}, {0xc, 0x1}, {0x4, 0x1}, {0xc}, {0x5, 0x1}, {0xe, 0x1}, {0xb}, {0xc, 0x1}, {0xe}]}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r3) ioctl$CHAR_RAW_FRASET(r3, 0x1264, &(0x7f00000000c0)=0x8d7) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000001c0)=0x100) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x9, 0x0, 0xe0, 0x0, 0x0, 0x20, 0x28000, 0xcc0fbfd8d730ebf2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x60, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x8, 0x8dfa, 0xfa, 0x9, 0xc6, 0x1, 0x6}, r1, 0xd, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x7, 0x1f, 0xc5, 0x5, 0x0, 0x5c7290c2, 0x800, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x2, 0x3, 0x9, 0x2, 0x40a, 0x1, 0x2}, r1, 0x1, r2, 0xb) getpgrp(r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000091) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000280)={0x2, 0x1}) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000240)=0x28) 21:43:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x5) socket(0x18, 0x80000, 0x2) 21:43:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x124, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}]}, 0x124}}, 0x0) 21:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xe0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xe0}}, 0x0) 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x640000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) [ 2868.062619] FAULT_INJECTION: forcing a failure. [ 2868.062619] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.074630] CPU: 0 PID: 21889 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2868.082519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.091880] Call Trace: [ 2868.094477] dump_stack+0x1b2/0x281 [ 2868.099427] should_fail.cold+0x10a/0x149 [ 2868.103596] should_failslab+0xd6/0x130 [ 2868.107578] kmem_cache_alloc_node_trace+0x58/0x400 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/184, 0xb8) [ 2868.112612] __kmalloc_node_track_caller+0x38/0x70 [ 2868.117577] __alloc_skb+0x96/0x510 [ 2868.121390] create_monitor_event+0x7e/0x800 [ 2868.125816] hci_sock_bind+0xb0f/0x1170 [ 2868.129799] ? hci_sock_ioctl+0x690/0x690 [ 2868.133958] ? security_socket_bind+0x83/0xb0 [ 2868.138465] SyS_bind+0x174/0x1f0 [ 2868.141936] ? SyS_socketpair+0x480/0x480 [ 2868.146091] ? wait_for_completion_io+0x10/0x10 [ 2868.150768] ? vfs_write+0x319/0x4d0 [ 2868.154487] ? fput+0xb/0x140 [ 2868.157609] ? SyS_write+0x14d/0x210 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x200042) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3926cc5c64395c021161a024f73dd1d92310a70fb74a67b4aaadba6b3beecb0ec200a5c9a4cea9c54b319f1c29b5a244bbb6a44a5744eb082db54770032470ea5e7da12d251210fde98f07bbb52fbf3115de9c2bc569aced60e605cacc91c0198e086948d2c6718cc854b0722a470dfeaeb837c60fc2886704e6b69e1581b0aa41a8bde8eea309b1e17610ffc37cd6a3356683c76362080000000000a0b7b809ad05915fd330c0637a55e2debd601c13dfd08602878aaf9f1b3beeaff441359619", @ANYRES16=r1, @ANYBLOB="02012abd7000fcdbdf256d0000000c009900ae9c000049000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x3a8, r3, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_IE={0x1b2, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb1, 0x6}}, @random={0x7f, 0xf3, "69d3865e96f7f60a693c1b8e099db140d114c3ce165e70b1fa7a3fb0909f2cb1a9d5e3e753174f72fea920837b41d761f97663666a0f2f26cddae5c0a5c2d5a2b58ea3717a7cff83489a6f544f8f69aa1bb872bc65fe6050328ded53dadc54b1dba1f0f8fa4ce115148d55edbe05feb3b7d4d8dfec9aedf32ca05cf4a8034016f28559f53779050b50fc1a4285cf02c5d23502d8e225df181c7637ffdfcacf5ea3523e3826241dbcbf7677503e38b47cd59bfc4aca5a9087f650bb193a972f8d54b28e40f3a1de074c36ac24d07244dac3b7461dad7eb257b742a37622ec7a3e2d2c86b36dcb58c33cf280d92366d887ab3bd0"}, @measure_req={0x26, 0xb2, {0x3, 0x20, 0x5, "9dba22ec44bcca7d0b069fcafc7e8f15b918d70ecdc9576825ac13e087b2d67a5a1da5080fca4c757357585dff50074ea3d18e6c8cd9a8e64c8cd9bfae129a68dec07fc5ac45b397b88a0907afb652f5cab56fbe12ef9b209472cd6d6a4f48e5f14916f77cc924900f4caedaa6c0d3508a31f487d7dbb68af9cd0b1cb8830b3fb351ab04f9a7353c868a2f23e82d482b0d1fa8284d86f8d3ccbf8a966faa48d738b511891b2dc406fc14c13ead22a4"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_IE={0x133, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @device_b}}, @mesh_chsw={0x76, 0x6, {0x7, 0x8, 0x9, 0x7f}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x7f, 0x5, @device_a, 0x3, 0x3, 0x1}}, @tim={0x5, 0xfa, {0x8, 0x89, 0xa, "70d5fb3488f1be1fce1f8f8ab2439e73250623d4e18880fa9464d3272deec8c7f11a2ea2f64ba15a850cc1762815ba3cf289359d9b4ac9623f7b83b2fd73da3615e8ecc1bfd9fb2d7ea5bd46b39f812e1d5f4362fb1072bc79b5303bfe58af8aa72768daa3f331f75e32cbd12f05931bea764ee37778dfde67dbff5c2de5b18c9ec3a70da3f0c3bdda4862366aa54fe266add69906431609819ee251c59cdf9e1a9f861f62e3a97e013976b95894b3e099d7bd700c0333aec857d054d913c5e7fbe10acf6fa7c0ba06d2189a7ef880a9c47519d28ef0c688b193afcd28aa950c24c7d0900fea6b5b9cc0cd794ceed5b4aac4b3ce4b4303"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_IE={0x76, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0x1f, 0x1d, 0x6}}, @tim={0x5, 0x65, {0x20, 0x85, 0x7f, "688919f63cec8f435889e00793e04b82237cfaf16a4cce00c4cf8da25296a351d1273b5258a8777ce96b0adbbe32ec0d8999fda9b6d84bf9f64630ccd9deabbfa590de172d84c836cda823bd937620660964dd9c0381697817ccb5df5edd6fbb30a3"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x25) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) [ 2868.161326] ? SyS_read+0x210/0x210 [ 2868.164963] ? __do_page_fault+0x159/0xad0 [ 2868.169198] ? do_syscall_64+0x4c/0x640 [ 2868.173178] ? SyS_socketpair+0x480/0x480 [ 2868.177332] do_syscall_64+0x1d5/0x640 [ 2868.181238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2868.186432] RIP: 0033:0x465b09 [ 2868.189657] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2868.197370] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2868.204654] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2868.212476] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.219755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2868.227028] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:51 executing program 0 (fault-call:1 fault-nth:24): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x94}}, 0x0) 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x800) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000100)) r2 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0xa2000) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x2055, 0xe, [{0x7}, {0x2}, {0x9}, {0x8}, {0x6, 0x1}, {0x6}, {0xa}, {0x1}, {0xa, 0x1}, {0xc}, {0x8, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0xc, 0x1}]}) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/192, 0xc0) 21:43:51 executing program 3: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x7c, 0x16, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x78, 0x4e, 0x77ae040ad2b8dc4a}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x7, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7c4c, 0x8, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) socket(0x18, 0x80000, 0x2) 21:43:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x100, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x100}}, 0x0) 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0x2, 0x400}) 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x100000007fffffff, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8) [ 2868.343910] FAULT_INJECTION: forcing a failure. [ 2868.343910] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.355221] CPU: 0 PID: 21913 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2868.363149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.372515] Call Trace: [ 2868.375111] dump_stack+0x1b2/0x281 [ 2868.378783] should_fail.cold+0x10a/0x149 [ 2868.383197] should_failslab+0xd6/0x130 [ 2868.387184] kmem_cache_alloc_node+0x54/0x410 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x7, 0x82d8}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x79, 0x311a00) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x100) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x2) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x3c11) [ 2868.391691] __alloc_skb+0x5c/0x510 [ 2868.395328] create_monitor_event+0x3a1/0x800 [ 2868.399827] hci_sock_bind+0x674/0x1170 [ 2868.403804] ? hci_sock_ioctl+0x690/0x690 [ 2868.407959] ? security_socket_bind+0x83/0xb0 [ 2868.412462] SyS_bind+0x174/0x1f0 [ 2868.415956] ? SyS_socketpair+0x480/0x480 [ 2868.420111] ? wait_for_completion_io+0x10/0x10 [ 2868.424789] ? vfs_write+0x319/0x4d0 [ 2868.428509] ? fput+0xb/0x140 [ 2868.431617] ? SyS_write+0x14d/0x210 [ 2868.435368] ? SyS_read+0x210/0x210 [ 2868.439004] ? __do_page_fault+0x159/0xad0 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000f, 0x11, r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x6}) [ 2868.443245] ? do_syscall_64+0x4c/0x640 [ 2868.447224] ? SyS_socketpair+0x480/0x480 [ 2868.451382] do_syscall_64+0x1d5/0x640 [ 2868.455282] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2868.460474] RIP: 0033:0x465b09 [ 2868.463666] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2868.471386] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2868.478662] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:51 executing program 3: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x17b, 0xb26914311d3db58c) socket(0x18, 0x80000, 0x2) 21:43:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x14103) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x4, 0xf, 0x1, 0x6, 0x6, 0xffff, &(0x7f0000000000)="143a7761c49a"}) 21:43:51 executing program 0 (fault-call:1 fault-nth:25): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x94}}, 0x0) 21:43:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x100, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x100}}, 0x0) [ 2868.485945] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.498177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2868.505454] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x11, r0, 0x0) 21:43:51 executing program 3: socket(0x18, 0x80000, 0x2) 21:43:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="d46d36f8", @ANYRES16=r0, @ANYBLOB="20002dbd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000000e0000000a003400020202020202000008002700000000000800270003000000080026008a0900000800a00040000000050018012f00000008009f00070000000500180125000000050019010f00000008000d00a9254c4d0500d500020000004000a6800a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000800a500010000000500d50001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20048001) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @auto=[0xf7, 0x35, 0x39, 0x37, 0x32, 0x35, 0x64, 0x0, 0x66, 0x35, 0x31, 0x62, 0x61, 0xa3183af4dff04b5d, 0x31, 0x35]}, &(0x7f0000000240)={0x0, "517a5d159e97b1ca6b3cd8c39fe85b32abf310ed812dcf494ad1e259821a5778bd21acd13e1998626d4426b57bae4e3014022ad86c9f648bab4629af41b4c0fa", 0x1f}, 0x48, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xee00, r2) 21:43:51 executing program 3: socket(0x0, 0x80000, 0x2) 21:43:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000440)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1, &(0x7f0000000400)=""/1, 0x1}, 0x2000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10000, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1ff, 0x200, &(0x7f0000000100)="a5e98edc517d1cda9a3f7f57fc8b06970dc838c5d5925e9cf0f84c4c1c78dd77bbfb11d0749c8e94d0254fcae1cb76175e16f41e6a4f01cc40dc1af1424fcf64991d9de994c090dee67ae91b9dac1661e1d7fbc15cb901a03d4db8fc1e1bdd9f616de23e000b882c632afafae85517c3f065892725ea27bfb21dc1abf00591694e5f9c049deb0dc8f5263761cf645befcc68178a2a4ff2ed10af63798deea8f8c2f0ee94b577aafc1dd0807e02c9e32200a2cfca0c60ea1265267705addd1ca683d76308"}) read$usbfs(r0, &(0x7f0000000000)=""/174, 0xae) [ 2868.630893] FAULT_INJECTION: forcing a failure. [ 2868.630893] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.642271] CPU: 0 PID: 21946 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2868.650161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.659635] Call Trace: [ 2868.662238] dump_stack+0x1b2/0x281 [ 2868.665879] should_fail.cold+0x10a/0x149 [ 2868.670041] should_failslab+0xd6/0x130 [ 2868.674035] kmem_cache_alloc_node_trace+0x58/0x400 [ 2868.679069] __kmalloc_node_track_caller+0x38/0x70 [ 2868.684012] __alloc_skb+0x96/0x510 [ 2868.687652] create_monitor_event+0x3a1/0x800 [ 2868.692158] hci_sock_bind+0x674/0x1170 [ 2868.696141] ? hci_sock_ioctl+0x690/0x690 [ 2868.700299] ? security_socket_bind+0x83/0xb0 [ 2868.704809] SyS_bind+0x174/0x1f0 [ 2868.708269] ? SyS_socketpair+0x480/0x480 [ 2868.712441] ? wait_for_completion_io+0x10/0x10 [ 2868.717112] ? vfs_write+0x319/0x4d0 [ 2868.720835] ? fput+0xb/0x140 [ 2868.723939] ? SyS_write+0x14d/0x210 [ 2868.727661] ? SyS_read+0x210/0x210 21:43:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) read$usbfs(r0, &(0x7f0000000000)=""/149, 0x95) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 2868.731292] ? __do_page_fault+0x159/0xad0 [ 2868.735533] ? do_syscall_64+0x4c/0x640 [ 2868.739506] ? SyS_socketpair+0x480/0x480 [ 2868.743654] do_syscall_64+0x1d5/0x640 [ 2868.747588] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2868.752780] RIP: 0033:0x465b09 [ 2868.755966] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2868.763672] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2868.770950] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x100, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x100}}, 0x0) 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2868.778242] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.785520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2868.792797] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:52 executing program 0 (fault-call:1 fault-nth:26): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:52 executing program 3: socket(0x0, 0x80000, 0x2) 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x12c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x12c}}, 0x0) [ 2868.873785] Bearer rejected, not supported in standalone mode 21:43:52 executing program 3: socket(0x0, 0x80000, 0x2) 21:43:52 executing program 3: socket(0x18, 0x0, 0x2) [ 2868.917298] FAULT_INJECTION: forcing a failure. [ 2868.917298] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.928686] CPU: 1 PID: 21974 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2868.936574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.945936] Call Trace: [ 2868.948535] dump_stack+0x1b2/0x281 [ 2868.952178] should_fail.cold+0x10a/0x149 [ 2868.956340] should_failslab+0xd6/0x130 [ 2868.960338] kmem_cache_alloc_node+0x54/0x410 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x124, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x124}}, 0x0) 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x11c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x11c}}, 0x0) 21:43:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) connect(0xffffffffffffffff, &(0x7f0000000440)=@nl=@unspec, 0x80) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x99c2, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000400)={0x6}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40101}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840200036447ddb3fcc940393bef00615d9c4d", @ANYRES16=0x0, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000003c0)=0x7ff) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 2868.964858] __alloc_skb+0x5c/0x510 [ 2868.968539] create_monitor_event+0x65a/0x800 [ 2868.973049] hci_sock_bind+0x5c5/0x1170 [ 2868.977032] ? hci_sock_ioctl+0x690/0x690 [ 2868.981184] ? security_socket_bind+0x83/0xb0 [ 2868.985695] SyS_bind+0x174/0x1f0 [ 2868.989153] ? SyS_socketpair+0x480/0x480 [ 2868.993301] ? wait_for_completion_io+0x10/0x10 [ 2868.997976] ? vfs_write+0x319/0x4d0 [ 2869.001694] ? fput+0xb/0x140 [ 2869.004800] ? SyS_write+0x14d/0x210 [ 2869.008520] ? SyS_read+0x210/0x210 [ 2869.012157] ? __do_page_fault+0x159/0xad0 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x114, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x114}}, 0x0) 21:43:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x0, 0x101, &(0x7f00000016c0)) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$inet(r1, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000040)="32344a02ab8f29fe5a4aa4c1012fcbcab2658c493ac05f6e8099ffab4087f718b657003d7f6b0b0ae89f246ab005b46b9db729fc7fcdda76b5d9e18545491c24f3bc7576a7011a475a7ca05dd6336e4e2a0dfba089d113bd1b2fdef6", 0x5c}, {&(0x7f00000000c0)="e79a5ffed0e06bc40ef38cfe0e1cd2f73416da36a7208e8afd21a9442c21ef420700e9cf6ec8d487c93a9ba7129322022a70756d0a750b4475b566ba8b1b9da6", 0x40}, {&(0x7f0000000100)="cfc9af9ec2159b8cd4ffd1d4cda52d80b2c8a42f9a45b565f139b581c32697278e0c152aa7e5795fa8a31ad0f988946613da0caeefbf18f136f9001d98ca530db469f6ec81435f90ab63a7bf59f6c9e615fad97b9996686cf22d05f323cce93de48ef5782bfbee3f243ef4939fd495fbb6688952bf17bf226f072cf2a16ee27bc42b173466e4f628b855a7", 0x8b}, {&(0x7f00000001c0)="d57f46b67a25734a065447b722144ca56b94347485e04fdf1c57440bd540984d0a8e9ae180bf110fac36f3b3f0ad1b8ca551", 0x32}, {&(0x7f0000000200)="94a75e3727724126f5594849f1e6c48dfca54d9289f5c7738a0e660ca84db2a3c3919e6539a7b85e6438934991667129d51b9342e97bfe0e0f58223babbb124c298c01766513d7cdbd51d3de449b6b", 0x4f}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="d1074917e1076ef3efba0280f7ac6442c931142573a72df5832a3a8ef7a1a7fc5b6dc605b7852918525bba54ec3ab394ff025f8fa6bbfa01aeadfa7de6af1dd08c4af1ba18895832e65cadfb1baeb098a5781dbe8f8b0c439cd82b2ff8d8b2a5e316b0fcae656cc30cfaa11668937ab8cfa97a3579f92a79e9e5f42f02d4aa5ffc2a2572c9eca9054c0024c083faffb7e76ed68f9f857629e3aac86d7d54983c", 0xa0}, {&(0x7f0000000280)="afc6cba917ac57ec739ff12f67ffc6fa329b4c3f28b078514e4e0d5859b9cc74fa0eae1b26fb68c85c190a52e33a5e52d96308876c0f21941b7fba2146e6aa19ac4bb437bc51987eaf3a2c422ad123bb7b71039625e6c5a6d58597d68c7045b7873d946167f342ca58c449ae5f6c4bf8aa23a690cfbe0ac506", 0x79}], 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="140100000000000000000000070000008317410a010100ffffffffac1414aae0000002e0000001865b00000001070beede6a9ddd3465e0460507a4f904b505000b9138ccc9eae58a0275010c31fd01f505730b0007888833c74c00104cf237f893ad64638fac3621397802091efa6aaa9944df444c2571ac1414aa00000002e000000200000000ac1414bb00000003ac141438000000000a010100000000010a01010100000000ac14141200000002ac1414bb00000008ac1e000100000006010002864200000000020589ddb3000202041a6f01101c413d4bdf3693b4060012a55d3f7017db0d2cb051fdc6e0bb46ad00086707691760e40000000000140000000000000000000000010005000100000000000000140000000000000000000000070000009404000000000000340000000000000000000000070000004404d253890704ffffffff94040100830f2f7f000001ac1e0001e00086e5155e7229626000000000110000000000000000000000010000000200000000000000110000000000000000000000010000008900000000000000140800000000000000000000010000000100"/441], 0x1c8}, 0x40810) syz_open_dev$usbfs(&(0x7f0000001700)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x125200) socket$inet6_udplite(0xa, 0x2, 0x88) [ 2869.016402] ? do_syscall_64+0x4c/0x640 [ 2869.020396] ? SyS_socketpair+0x480/0x480 [ 2869.024556] do_syscall_64+0x1d5/0x640 [ 2869.028455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2869.033643] RIP: 0033:0x465b09 [ 2869.036829] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2869.044541] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2869.051816] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2869.059091] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 21:43:52 executing program 3: socket(0x18, 0x0, 0x0) 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:52 executing program 0 (fault-call:1 fault-nth:27): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2c0040) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000080)=0x8001) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@remote, 0x55}) [ 2869.066369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2869.073650] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x10c}}, 0x0) 21:43:52 executing program 3: socket(0x18, 0x0, 0x0) [ 2869.147325] Bearer rejected, not supported in standalone mode 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x8c}}, 0x0) 21:43:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x6, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:52 executing program 3: socket(0x18, 0x0, 0x0) [ 2869.193328] FAULT_INJECTION: forcing a failure. [ 2869.193328] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.204656] CPU: 0 PID: 22005 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2869.212568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2869.221931] Call Trace: [ 2869.224534] dump_stack+0x1b2/0x281 [ 2869.228181] should_fail.cold+0x10a/0x149 [ 2869.232342] should_failslab+0xd6/0x130 [ 2869.236328] kmem_cache_alloc_node_trace+0x58/0x400 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x8c}}, 0x0) [ 2869.241357] __kmalloc_node_track_caller+0x38/0x70 [ 2869.246297] __alloc_skb+0x96/0x510 [ 2869.249939] create_monitor_event+0x65a/0x800 [ 2869.254445] hci_sock_bind+0x5c5/0x1170 [ 2869.258431] ? hci_sock_ioctl+0x690/0x690 [ 2869.262594] ? security_socket_bind+0x83/0xb0 [ 2869.267102] SyS_bind+0x174/0x1f0 [ 2869.270564] ? SyS_socketpair+0x480/0x480 [ 2869.274720] ? wait_for_completion_io+0x10/0x10 [ 2869.279682] ? vfs_write+0x319/0x4d0 [ 2869.283405] ? fput+0xb/0x140 [ 2869.286604] ? SyS_write+0x14d/0x210 [ 2869.290318] ? SyS_read+0x210/0x210 21:43:52 executing program 5: ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000000)=0x4) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x12, 0x40011, 0xffffffffffffffff, 0x887) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:43:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x407fffffff, 0x8000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x8c}}, 0x0) [ 2869.293950] ? __do_page_fault+0x159/0xad0 [ 2869.298186] ? do_syscall_64+0x4c/0x640 [ 2869.302165] ? SyS_socketpair+0x480/0x480 [ 2869.306317] do_syscall_64+0x1d5/0x640 [ 2869.310241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2869.315435] RIP: 0033:0x465b09 [ 2869.318622] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2869.326423] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2869.333697] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2869.340971] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.348245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2869.355519] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:52 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x141602) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0xd8) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0xa000) 21:43:52 executing program 0 (fault-call:1 fault-nth:28): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x10c}}, 0x0) 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x8c}}, 0x0) [ 2869.394011] Bearer rejected, not supported in standalone mode 21:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) [ 2869.477793] Bearer rejected, not supported in standalone mode [ 2869.521667] FAULT_INJECTION: forcing a failure. [ 2869.521667] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.533048] CPU: 0 PID: 22043 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2869.536924] Bearer rejected, not supported in standalone mode [ 2869.540931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2869.540935] Call Trace: [ 2869.540953] dump_stack+0x1b2/0x281 [ 2869.540970] should_fail.cold+0x10a/0x149 [ 2869.567827] should_failslab+0xd6/0x130 21:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) 21:43:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x444000) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x10c}}, 0x0) [ 2869.571817] kmem_cache_alloc_node+0x54/0x410 [ 2869.576336] __alloc_skb+0x5c/0x510 [ 2869.579979] create_monitor_event+0x7e/0x800 [ 2869.584397] hci_sock_bind+0xb0f/0x1170 [ 2869.588381] ? hci_sock_ioctl+0x690/0x690 [ 2869.592541] ? security_socket_bind+0x83/0xb0 [ 2869.597047] SyS_bind+0x174/0x1f0 [ 2869.600509] ? SyS_socketpair+0x480/0x480 [ 2869.604668] ? wait_for_completion_io+0x10/0x10 [ 2869.609347] ? vfs_write+0x319/0x4d0 [ 2869.613073] ? fput+0xb/0x140 [ 2869.618351] ? SyS_write+0x14d/0x210 [ 2869.622072] ? SyS_read+0x210/0x210 [ 2869.623066] Bearer rejected, not supported in standalone mode [ 2869.625705] ? __do_page_fault+0x159/0xad0 [ 2869.625717] ? do_syscall_64+0x4c/0x640 [ 2869.625729] ? SyS_socketpair+0x480/0x480 [ 2869.625739] do_syscall_64+0x1d5/0x640 [ 2869.625755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2869.625762] RIP: 0033:0x465b09 [ 2869.625766] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:43:52 executing program 0 (fault-call:1 fault-nth:29): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:52 executing program 2: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0xfffffffffffffffd) 21:43:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r2, r1}, 0x10) 21:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) 21:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2869.625775] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2869.625780] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2869.625785] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.625790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2869.625795] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x114, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x114}}, 0x0) 21:43:52 executing program 2: ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0x3ff, &(0x7f0000000040)="0d91a9b65ee578098249339068b738f82bc69b917581c33d53c8547a0c282d2cca660dfc078003076a028eda36afe7978af8a5a3591693aa1cfdcadc75029bde168edff9"}) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffd, 0x54f380) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@empty}, 0x14) [ 2869.784285] FAULT_INJECTION: forcing a failure. [ 2869.784285] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.795869] CPU: 1 PID: 22064 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2869.797882] Bearer rejected, not supported in standalone mode [ 2869.803862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2869.803867] Call Trace: [ 2869.803887] dump_stack+0x1b2/0x281 [ 2869.803908] should_fail.cold+0x10a/0x149 [ 2869.830767] should_failslab+0xd6/0x130 21:43:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x3, 0x10800) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0x11, r0, 0x3fffffffffffffc) [ 2869.834751] kmem_cache_alloc_node_trace+0x58/0x400 [ 2869.839790] __kmalloc_node_track_caller+0x38/0x70 [ 2869.844735] __alloc_skb+0x96/0x510 [ 2869.848377] create_monitor_event+0x7e/0x800 [ 2869.852793] hci_sock_bind+0xb0f/0x1170 [ 2869.856780] ? hci_sock_ioctl+0x690/0x690 [ 2869.860940] ? security_socket_bind+0x83/0xb0 [ 2869.865446] SyS_bind+0x174/0x1f0 [ 2869.868925] ? SyS_socketpair+0x480/0x480 [ 2869.873181] ? wait_for_completion_io+0x10/0x10 [ 2869.877851] ? vfs_write+0x319/0x4d0 21:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x10c}}, 0x0) [ 2869.883656] ? fput+0xb/0x140 [ 2869.886767] ? SyS_write+0x14d/0x210 [ 2869.890486] ? SyS_read+0x210/0x210 [ 2869.894125] ? __do_page_fault+0x159/0xad0 [ 2869.898373] ? do_syscall_64+0x4c/0x640 [ 2869.902444] ? SyS_socketpair+0x480/0x480 [ 2869.906597] do_syscall_64+0x1d5/0x640 [ 2869.910494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2869.915685] RIP: 0033:0x465b09 [ 2869.918878] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2869.926609] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x94}}, 0x0) 21:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:53 executing program 0 (fault-call:1 fault-nth:30): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:53 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x6f4, 0x161183) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20800) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x10100) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) [ 2869.933893] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2869.941167] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.948479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2869.955757] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x10c}}, 0x0) 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x94}}, 0x0) 21:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2870.059116] Bearer rejected, not supported in standalone mode [ 2870.069620] FAULT_INJECTION: forcing a failure. [ 2870.069620] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.081227] CPU: 1 PID: 22092 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2870.089128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2870.098492] Call Trace: [ 2870.101091] dump_stack+0x1b2/0x281 [ 2870.104732] should_fail.cold+0x10a/0x149 [ 2870.108913] should_failslab+0xd6/0x130 [ 2870.112897] kmem_cache_alloc_node+0x54/0x410 [ 2870.117427] __alloc_skb+0x5c/0x510 [ 2870.121066] create_monitor_event+0x3a1/0x800 [ 2870.125569] hci_sock_bind+0x674/0x1170 [ 2870.129565] ? hci_sock_ioctl+0x690/0x690 [ 2870.131576] Bearer rejected, not supported in standalone mode [ 2870.133727] ? security_socket_bind+0x83/0xb0 [ 2870.133740] SyS_bind+0x174/0x1f0 [ 2870.133753] ? SyS_socketpair+0x480/0x480 [ 2870.133766] ? wait_for_completion_io+0x10/0x10 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x94}}, 0x0) 21:43:53 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20, 0x87e521b0d9b17171) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x2400, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r1, 0x9e8) 21:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x10c}}, 0x0) 21:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2870.157746] ? vfs_write+0x319/0x4d0 [ 2870.161471] ? fput+0xb/0x140 [ 2870.164579] ? SyS_write+0x14d/0x210 [ 2870.168296] ? SyS_read+0x210/0x210 [ 2870.171928] ? __do_page_fault+0x159/0xad0 [ 2870.176175] ? do_syscall_64+0x4c/0x640 [ 2870.180157] ? SyS_socketpair+0x480/0x480 [ 2870.184316] do_syscall_64+0x1d5/0x640 [ 2870.188221] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2870.193415] RIP: 0033:0x465b09 [ 2870.196602] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:43:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001500)=0x14) sendmsg$nl_route(r1, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)=@ipv4_newaddr={0x44, 0x14, 0x4, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x10, 0xff, r2}, [@IFA_FLAGS={0x8, 0x8, 0x128}, @IFA_CACHEINFO={0x14, 0x6, {0x3f, 0x7, 0x40, 0x4}}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x30040001) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x80000000, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6b, 0x402000) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)) 21:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) [ 2870.204329] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2870.211637] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2870.218915] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.226276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2870.233552] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:53 executing program 0 (fault-call:1 fault-nth:31): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:53 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x3fffffffffe) 21:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x114, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x114}}, 0x0) 21:43:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x100e00, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="550e0000040000000f868c87b0697327fc6c2b802516948d8ceac0cc68c39a2320b5ff7a48ba3a6580a0ff8b3feec1e2510298c2baa38f7199f37f4abc8b5ac660ec5983fbbd00e63927dc2a5275c49c51c5aa04a36d0b38d9291d5a039d65b16e12bf970c5395589dff0f000000000000584877f699f5e0ae2e04f9c1b3e34dbadd6c1d8a45b5bc82208276800a8342bb47d726e9db083598aa9d66e9a5003ec1da03af3f9f515f6929d64fceeea55cc1e2ec77c81842508e6a6273d2243e5ac2209d38607c"]) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0xb7) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) 21:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2870.310826] Bearer rejected, not supported in standalone mode 21:43:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x200000) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x4}) [ 2870.397595] FAULT_INJECTION: forcing a failure. [ 2870.397595] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.408949] CPU: 0 PID: 22128 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2870.416837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2870.426195] Call Trace: [ 2870.428788] dump_stack+0x1b2/0x281 [ 2870.432427] should_fail.cold+0x10a/0x149 [ 2870.436587] should_failslab+0xd6/0x130 [ 2870.441273] kmem_cache_alloc_node_trace+0x58/0x400 21:43:53 executing program 2: mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 21:43:53 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:53 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2870.446311] __kmalloc_node_track_caller+0x38/0x70 [ 2870.451246] __alloc_skb+0x96/0x510 [ 2870.454878] create_monitor_event+0x3a1/0x800 [ 2870.459381] hci_sock_bind+0x674/0x1170 [ 2870.463364] ? hci_sock_ioctl+0x690/0x690 [ 2870.467520] ? security_socket_bind+0x83/0xb0 [ 2870.472021] SyS_bind+0x174/0x1f0 [ 2870.475477] ? SyS_socketpair+0x480/0x480 [ 2870.479629] ? wait_for_completion_io+0x10/0x10 [ 2870.484310] ? vfs_write+0x319/0x4d0 [ 2870.488032] ? fput+0xb/0x140 [ 2870.491137] ? SyS_write+0x14d/0x210 21:43:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x20000000000) 21:43:53 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2870.494857] ? SyS_read+0x210/0x210 [ 2870.498498] ? __do_page_fault+0x159/0xad0 [ 2870.502739] ? do_syscall_64+0x4c/0x640 [ 2870.506728] ? SyS_socketpair+0x480/0x480 [ 2870.510879] do_syscall_64+0x1d5/0x640 [ 2870.514780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2870.519971] RIP: 0033:0x465b09 [ 2870.523160] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2870.530869] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2870.538140] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 21:43:53 executing program 0 (fault-call:1 fault-nth:32): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x10c}}, 0x0) 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) 21:43:53 executing program 5: r0 = socket(0x1e, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x800) socketpair(0x1, 0x80000, 0x2d, &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40) r1 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xef10, 0x200000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000f, 0x13, r1, 0x0) 21:43:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x8}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0x205) [ 2870.545412] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.552683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2870.559957] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2870.573988] Bearer rejected, not supported in standalone mode 21:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x104, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x104}}, 0x0) 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x84, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x84}}, 0x0) [ 2870.658169] Bearer rejected, not supported in standalone mode [ 2870.686574] FAULT_INJECTION: forcing a failure. [ 2870.686574] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.698050] CPU: 0 PID: 22155 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x84, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x84}}, 0x0) 21:43:53 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x418}) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x12, r0, 0x0) [ 2870.705938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2870.715300] Call Trace: [ 2870.717894] dump_stack+0x1b2/0x281 [ 2870.721531] should_fail.cold+0x10a/0x149 [ 2870.725692] should_failslab+0xd6/0x130 [ 2870.729688] kmem_cache_alloc_node+0x54/0x410 [ 2870.734198] __alloc_skb+0x5c/0x510 [ 2870.737838] create_monitor_event+0x65a/0x800 [ 2870.742340] hci_sock_bind+0x5c5/0x1170 [ 2870.746328] ? hci_sock_ioctl+0x690/0x690 [ 2870.750485] ? security_socket_bind+0x83/0xb0 [ 2870.754985] SyS_bind+0x174/0x1f0 21:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x84, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x84}}, 0x0) [ 2870.758448] ? SyS_socketpair+0x480/0x480 [ 2870.762602] ? wait_for_completion_io+0x10/0x10 [ 2870.767277] ? vfs_write+0x319/0x4d0 [ 2870.770994] ? fput+0xb/0x140 [ 2870.774125] ? SyS_write+0x14d/0x210 [ 2870.778186] ? SyS_read+0x210/0x210 [ 2870.781819] ? __do_page_fault+0x159/0xad0 [ 2870.786066] ? do_syscall_64+0x4c/0x640 [ 2870.790045] ? SyS_socketpair+0x480/0x480 [ 2870.794204] do_syscall_64+0x1d5/0x640 [ 2870.798112] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2870.803305] RIP: 0033:0x465b09 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) socket$inet_sctp(0x2, 0x4c2219d6cc42f77a, 0x84) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 2870.806492] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2870.814204] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2870.821484] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2870.828886] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.836167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2870.843441] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:54 executing program 0 (fault-call:1 fault-nth:33): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:54 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=r0) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0x2, 0x3}) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x104, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x104}}, 0x0) 21:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:54 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x28800) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x40010, r0, 0x2) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r1, 0x2) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) [ 2870.860264] Bearer rejected, not supported in standalone mode 21:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000080)) read$usbfs(0xffffffffffffffff, &(0x7f00000000c0)=""/117, 0x75) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xf7, 0x9, 0x8, 0x80, 0x0, 0x4, 0x2a05, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x714, 0x0, @perf_config_ext={0x1, 0x94b}, 0x800, 0x9, 0xe, 0x9, 0x6, 0x6, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) [ 2870.942095] Bearer rejected, not supported in standalone mode [ 2870.952741] FAULT_INJECTION: forcing a failure. [ 2870.952741] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.964156] CPU: 1 PID: 22187 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2870.972044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2870.981403] Call Trace: [ 2870.984002] dump_stack+0x1b2/0x281 [ 2870.987641] should_fail.cold+0x10a/0x149 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x52, r0, 0x2) 21:43:54 executing program 5: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xfd, 0xe0122) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) [ 2870.991802] should_failslab+0xd6/0x130 [ 2870.995786] kmem_cache_alloc_node_trace+0x58/0x400 [ 2871.000820] __kmalloc_node_track_caller+0x38/0x70 [ 2871.005762] __alloc_skb+0x96/0x510 [ 2871.009403] create_monitor_event+0x65a/0x800 [ 2871.013903] hci_sock_bind+0x5c5/0x1170 [ 2871.017886] ? hci_sock_ioctl+0x690/0x690 [ 2871.022045] ? security_socket_bind+0x83/0xb0 [ 2871.026646] SyS_bind+0x174/0x1f0 [ 2871.030205] ? SyS_socketpair+0x480/0x480 [ 2871.034362] ? wait_for_completion_io+0x10/0x10 [ 2871.039041] ? vfs_write+0x319/0x4d0 [ 2871.042764] ? fput+0xb/0x140 [ 2871.045875] ? SyS_write+0x14d/0x210 [ 2871.049594] ? SyS_read+0x210/0x210 [ 2871.053240] ? __do_page_fault+0x159/0xad0 [ 2871.057486] ? do_syscall_64+0x4c/0x640 [ 2871.061470] ? SyS_socketpair+0x480/0x480 [ 2871.065634] do_syscall_64+0x1d5/0x640 [ 2871.069541] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2871.074737] RIP: 0033:0x465b09 [ 2871.077926] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:43:54 executing program 0 (fault-call:1 fault-nth:34): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x80) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x8010, r0, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, r0, 0x200) 21:43:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x4, 0xa, 0x1, 0x31, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x10, 0x7, 0x4}}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000240)={0x10001, 0x7}) r2 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x80001) read$usbfs(r2, &(0x7f0000000180)=""/176, 0xb0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@local, @mcast1, @ipv4={[], [], @multicast1}, 0xfffffffb, 0x7f, 0x6, 0x400, 0x2000000002, 0x60670122, r1}) 21:43:54 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}}, 0x0) 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x104, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x104}}, 0x0) [ 2871.085640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2871.093262] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2871.100543] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.107819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2871.115094] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x4c}}, 0x0) 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = socket(0x29, 0x6, 0x6) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000000)="f4f9dd192273864d7db5fdaec1b99fc0af8110ba84af2a3b8d7afac33b8a65c5ee6059e77b98686a3ba5433e3b711c43b5ea8f9ed767dc531c69fad944cbd1a5316404bbaf16a8854beee8c00f") [ 2871.170914] FAULT_INJECTION: forcing a failure. [ 2871.170914] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.182436] CPU: 1 PID: 22206 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2871.190347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2871.199706] Call Trace: [ 2871.202304] dump_stack+0x1b2/0x281 [ 2871.205945] should_fail.cold+0x10a/0x149 [ 2871.210116] should_failslab+0xd6/0x130 [ 2871.214107] kmem_cache_alloc_node+0x54/0x410 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x30}}, 0x0) 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x200) [ 2871.218612] __alloc_skb+0x5c/0x510 [ 2871.222249] create_monitor_event+0x7e/0x800 [ 2871.226668] hci_sock_bind+0xb0f/0x1170 [ 2871.230654] ? hci_sock_ioctl+0x690/0x690 [ 2871.234811] ? security_socket_bind+0x83/0xb0 [ 2871.239333] SyS_bind+0x174/0x1f0 [ 2871.242793] ? SyS_socketpair+0x480/0x480 [ 2871.246954] ? wait_for_completion_io+0x10/0x10 [ 2871.251631] ? vfs_write+0x319/0x4d0 [ 2871.255350] ? fput+0xb/0x140 [ 2871.258461] ? SyS_write+0x14d/0x210 [ 2871.262180] ? SyS_read+0x210/0x210 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x30}}, 0x0) 21:43:54 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0690299348d287b6fae394e149950c25bea9b24a176dea6dcc51bc4753427a39c682024225847aee59ecaf3739b966b220859fe64d2bd93a992539ffb72efb19c83b268ef9ffedc98106000847f7f8835f543b3625c552e47796fd63b8502274383d438aaf616a88c42247e93c4aeadf4f95f9c3be0c10e055b2925d8a148ade6f04ec4c3f5254eb582920af9b8c", 0x8e) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x110, r1, 0x0) [ 2871.264816] Bearer rejected, not supported in standalone mode [ 2871.265806] ? __do_page_fault+0x159/0xad0 [ 2871.265818] ? do_syscall_64+0x4c/0x640 [ 2871.265830] ? SyS_socketpair+0x480/0x480 [ 2871.265838] do_syscall_64+0x1d5/0x640 [ 2871.265854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2871.294333] RIP: 0033:0x465b09 [ 2871.297541] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2871.305252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 2871.311262] Bearer rejected, not supported in standalone mode 21:43:54 executing program 0 (fault-call:1 fault-nth:35): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x2c0700, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x1b}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rxrpc_skb\x00', r1}, 0x10) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x30}}, 0x0) 21:43:54 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2871.312533] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2871.312539] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.312545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2871.312551] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 [ 2871.359477] Bearer rejected, not supported in standalone mode 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x104, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x104}}, 0x0) 21:43:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400002, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000080)={0x1ff, &(0x7f0000000340)="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"}) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000000c0)=0x1ff) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x80300, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000140)=0xf6a) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x44}}, 0x0) 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x104, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x104}}, 0x0) [ 2871.426058] Bearer rejected, not supported in standalone mode [ 2871.426174] FAULT_INJECTION: forcing a failure. [ 2871.426174] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.445318] CPU: 0 PID: 22240 Comm: syz-executor.0 Not tainted 4.14.218-syzkaller #0 [ 2871.453211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2871.462580] Call Trace: [ 2871.465190] dump_stack+0x1b2/0x281 [ 2871.468834] should_fail.cold+0x10a/0x149 21:43:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x20, 0x10000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/179, 0xb3) 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x104, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6f0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x104}}, 0x0) [ 2871.473004] should_failslab+0xd6/0x130 [ 2871.477011] kmem_cache_alloc_node_trace+0x58/0x400 [ 2871.482043] __kmalloc_node_track_caller+0x38/0x70 [ 2871.486986] __alloc_skb+0x96/0x510 [ 2871.490637] create_monitor_event+0x7e/0x800 [ 2871.495064] hci_sock_bind+0xb0f/0x1170 [ 2871.499043] ? hci_sock_ioctl+0x690/0x690 [ 2871.503199] ? security_socket_bind+0x83/0xb0 [ 2871.507700] SyS_bind+0x174/0x1f0 [ 2871.511171] ? SyS_socketpair+0x480/0x480 [ 2871.515322] ? wait_for_completion_io+0x10/0x10 [ 2871.519997] ? vfs_write+0x319/0x4d0 21:43:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x400000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) [ 2871.523720] ? fput+0xb/0x140 [ 2871.526837] ? SyS_write+0x14d/0x210 [ 2871.530554] ? SyS_read+0x210/0x210 [ 2871.534320] ? __do_page_fault+0x159/0xad0 [ 2871.538565] ? do_syscall_64+0x4c/0x640 [ 2871.542550] ? SyS_socketpair+0x480/0x480 [ 2871.546708] do_syscall_64+0x1d5/0x640 [ 2871.550608] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2871.555799] RIP: 0033:0x465b09 [ 2871.559007] RSP: 002b:00007ff5a5dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2871.566718] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) socket$alg(0x26, 0x5, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0x8653, 0x2, [{0xc}, {0x9}]}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="dbfd00000f0000f304a8733c0600880f0000200010000000b79f85ea"]) 21:43:54 executing program 0 (fault-call:1 fault-nth:36): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd8}}, 0x0) 21:43:54 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x44}}, 0x0) 21:43:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0xa9a9, 0x13, [{0xf, 0x1}, {0x6, 0x1}, {0xf, 0x1}, {0xe, 0x1}, {0x9, 0x1}, {0xc}, {0x6, 0x1}, {0x8}, {0xa}, {0xf, 0x1}, {0xf, 0x1}, {0x9}, {0x4}, {0xa}, {0xe}, {0xc}, {0xc}, {0xb}, {0xa}]}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000000c0)={0x4, &(0x7f0000000000)="babf26d9d2883e6399140b243facffaafb1f99f79e5889e2c87a9d23c585edb389192113dbd96fdde160937d21b755a2c68ad20431353d987966a850ee5b43c7ba46f5f9edfed463fdd0cb680b4636fc70803e9caae54b863e7f7c765c88db0828bbdace21a05f5e618b8ba57cc4d8e2458d2726321dbcb80ffb2e7912f23bf7a8513702f46214c43f2f8f02bf03404041f90b1dd720a775"}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r0, 0xfffffffffffffff9) 21:43:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000001200)) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x64}, @ldst={0x3, 0x1, 0x0, 0x5, 0xf, 0x6, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x2, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0xc, 0x3}, 0x10, 0xffffffffffffffff}, 0x78) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000011c0)=r2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001700)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000001800)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001840)={@dev={0xfe, 0x80, [], 0x10}, @dev={0xfe, 0x80, [], 0x28}, @empty, 0x100, 0x3, 0x5, 0x400, 0xe73b, 0x85590008, r3}) [ 2871.574081] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2871.581356] RBP: 00007ff5a5dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.588634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2871.595906] R13: 00007ffcf9c4b14f R14: 00007ff5a5dfa300 R15: 0000000000022000 21:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}]}]}]}, 0x44}}, 0x0) 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) 21:43:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4d60c0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000080)={0x1, &(0x7f0000000040)="e271841295aada1acb48473cb7c9ef412ae83aebef238117dc2263343bb570d11eba"}) getgid() r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x200, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x810, r2, 0xff) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0xae85}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x27, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="b954120f7511fc8a873a16112db1ad1aab2353647ddf82cd0ca347cf70c0c0509f6b3b2224a1db798f4b43fae0ea5e7f91f1d744b14b5f303d1a2410495066957be35e8e5c4f56a510f77aab31f84472c80242e4e5c9d7561d29113a866317c4b347bce9587002e7c5fa8e4a884a1e970f584850fb186deb907eb4cc2c8ad6223c3bf6075c364607a0e0afe0209166df3b37e1d9a76bcbb4f890e23c8fc11178ad0a239d32", 0xa5) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:54 executing program 2: syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) 21:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 21:43:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) [ 2871.761305] Bearer rejected, not supported in standalone mode 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x40) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) recvfrom(r1, 0xffffffffffffffff, 0x0, 0x102, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x4}}, 0x80) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x109200, 0x0) ioctl$CHAR_RAW_DISCARD(r3, 0x1277, &(0x7f0000000040)=0x1) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 21:43:55 executing program 0: r0 = syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0x2000) ioctl$CHAR_RAW_ROGET(r0, 0x125e, &(0x7f0000000080)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) [ 2871.837729] Bearer rejected, not supported in standalone mode 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) 21:43:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0xa011, r1, 0xffffffffffffff80) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x4c}}, 0x0) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f00000001c0)=0x2) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x119940, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getchain={0x44, 0x66, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0x10, 0x8}, {0x7, 0x8}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x40000000}, {0x8, 0xb, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40448d0) r2 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x2, 0x103200) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000280)) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x52, 0x80000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x4c}}, 0x0) 21:43:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x200) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x0) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x5}, {0x0, 0xc}, {0x2, 0x3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x539}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x400000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4018800) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 2872.011467] Bearer rejected, not supported in standalone mode 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x4c}}, 0x0) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9fdb, 0x400) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f00000000c0)) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x36b2, 0x16, [{0x2, 0x1}, {0x7, 0x1}, {0x3}, {0x9}, {0x0, 0x1}, {0x3, 0x1}, {0xe}, {0x6}, {0xc}, {0x1, 0x1}, {0xd}, {0x1}, {0x7}, {0x0, 0x1}, {0x1, 0x1}, {}, {0xc, 0x1}, {0xb}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x6}]}) 21:43:55 executing program 5: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x42000, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000100)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x4, r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 21:43:55 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x528, 0x220, 0x118, 0xffffffff, 0x118, 0x0, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'vxcan1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@remote, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ipvlan1\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@ipv4={[], [], @broadcast}, @mcast2, [], [], 'rose0\x00', 'rose0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "d7ff"}}, @common=@ah={{0x30, 'ah\x00'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@broadcast, @port, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x0) read$usbfs(r1, &(0x7f0000000000)=""/155, 0x9b) 21:43:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x0, 0x148, 0x148, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}, @common=@ah={{0x30, 'ah\x00'}, {[0x0, 0x4d4], 0x0, 0x90}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth0_to_batadv\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x0, 0x0, [0x4e23, 0x0, 0x4e24, 0x4e20, 0x4e22, 0x0, 0x4e24, 0x4e20, 0x4e24, 0x4e20, 0x4e21], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x6, 0x3]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x4400, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r2}, 0xffffffffffffffc7) r3 = accept4(r1, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000700)=0x80, 0x800) write$bt_hci(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="01013204000a0000f5ff7f00"], 0xc) r4 = socket(0x15, 0x5, 0xfff) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000140)=0x5, 0x4) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) [ 2872.204075] Bearer rejected, not supported in standalone mode 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x80000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2) 21:43:55 executing program 2: ioctl$CHAR_RAW_FLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x1f) r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) [ 2872.253349] x_tables: ip6_tables: SYNPROXY target: used from hooks INPUT/FORWARD/OUTPUT, but only usable from INPUT/FORWARD 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) [ 2872.313224] x_tables: ip6_tables: SYNPROXY target: used from hooks INPUT/FORWARD/OUTPUT, but only usable from INPUT/FORWARD [ 2872.320122] Bearer rejected, not supported in standalone mode 21:43:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) read$usbfs(r1, &(0x7f0000000040)=""/159, 0x9f) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:55 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x1d}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x80000002, 0x222080) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r2, 0x0) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) 21:43:55 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000000)={0x6003, 0x6280, 0xffffffc0}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$CHAR_RAW_DISCARD(r1, 0x1277, &(0x7f0000000040)=0x238) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x800, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) 21:43:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@security={'security\x00', 0xe, 0x4, 0xd10, 0xffffffff, 0xb10, 0x8e0, 0x8e0, 0xffffffff, 0xffffffff, 0xc40, 0xc40, 0xc40, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @remote, [], [], 'veth0_to_bond\x00', 'bond_slave_1\x00'}, 0x0, 0x8b8, 0x8e0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@unspec=@u32={{0x7e0, 'u32\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@private2, @private0, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @remote, @private2, @remote, @private2, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@udp={{0x30, 'udp\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd70) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd0}}, 0x0) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x400800) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x2a2b}) [ 2872.431818] Bearer rejected, not supported in standalone mode 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 21:43:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) accept4(r0, 0x0, &(0x7f0000000000), 0x80000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000005540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005500)={&(0x7f0000000080)={0x545c, r3, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x52}, @void, @val={0xc, 0x99, {0xff, 0x22}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2e4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2cc, 0x4, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x39, 0x1, "9f742a9f24b2cf77196d6c8f7cbff0f3360b58aee11cb7cc85bc0f9089ac028e303c61204417af69411a5e4d21599ee3634b2ec048"}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0x5, 0x2, '5'}, @NL80211_PKTPAT_MASK={0x29, 0x1, "6d1d581bc95e70f7de344ae1fd9c6e5ca2522140584c64e29b18ee11ec811527feafd218c3"}, @NL80211_PKTPAT_MASK={0x5b, 0x1, "48b25f4a23cf623e4c4e159241df6c81126c450cfd4410e8c1f8865df3f37d3fceb45a31bb4dbe11c0c2f55e1afdd9e4cf690bf618ff3e738b42cdcae16f63845a77084130b56342238185c665000355afc4c9ddeccb84"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x24, 0x2, "f85504f68c4bc4419b092412bb3b396e7f7323f70bb0547395c94cb0e38f297b"}, @NL80211_PKTPAT_PATTERN={0x37, 0x2, "b58b7da73d7c90e68a144d4821177b05ad24625824b1726a66c1257f282eadd7a9ae6d430a7dfae9218bd7edad43111147edfb"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9d4}, @NL80211_PKTPAT_PATTERN={0x23, 0x2, "c921b969df69d829e18b6ce18e61019838dc613be1546fb3e0d12e232aa38c"}, @NL80211_PKTPAT_PATTERN={0x51, 0x2, "752293469eafbead79f68706e8f0f72db892f384b8efc5af2ed9a7d43f6c44367dbcca3809022fe63c438a33757346032b2b4621fa78e3b4712072b400dd825c80ced90c803a4775d7ffe09347"}, @NL80211_PKTPAT_MASK={0x24, 0x1, "cda9e404505d5f8741fbfaf26fd01c08397902f6e28251ecffa18a3f325c27e3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0xab, 0x1, "d4ce4f61262a60943467b27f5ce4465d4a935970cc96723924757c9b4ad254130fe611736a73599626ca4c978da410783a19edfb4ed15e60650c9d5f5b38f3be0f8200e0f60ab8689ff5b74457dbe0e76eb77ac444bbcd2332731f0e071194f4c0de1caee0f1964e1be8a17f5538a4918b42579921f46fef62b7cf2d31bd4e613b2382fcdf63aea4ecd1174c5d5ad334a8386be7264c594e978e4567af3d947a116c5737b3297a"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2a30, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2a24, 0x4, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xf4, 0x2, "7f541901c319f4694c0da38bc4779833c707affb8857e7ff9cb6448d24da4af369f701091253c80d03d879e916fbf2047d184a231cc70c663d703b3b484a5daf59ea8ca7bfb634bf128db6614121e480c3588f9a7ee22160b686785e4ee4f0d52f6095b5e7bf4a8556ec92790738b639ad9540475642c189cc68c45c92779ab7878cde5b99b7afc965fc8cb9e94e8b7f3c4714c05745b75c01c694dd3fd4470af11974a71ed5a54c38b2c6af213f2c135e6cfc602a33528fdad7b3a6861078f5f84f016b5fc7fc04904df64cfdd8604561de935469ddeed3f8ee249b02ba52e11562ac9b482ee584b333208c42ccac1c"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1f}]}, {0x13d4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd3, 0x1, "ff63184de0aab9271f7d48aa17a9b4ae352bcb73c5315301d657d008005d7ae920fdd3834a6e0a589d0aebbe5edd509730dda0609aa8e8f1242fe9ed524f76aa8829646bc17564f94aca4b3ea664a2f547b56d7816ed6d9ecff99ba8c57e26b2ccf2023068c71b6c1f2c019eb521f7e3d0cf60c9da8e90230449904f5aa20530a90e12eeba8ab72597b6fa9796eb3a83486bcefc26bfcfc16122ba73a588a16258e68a1e0b3f5b0feeac2b7fbe1a945262422af9a6d458c384057d0e73d4941bf71173a9531c8ac0f3c875708eb539"}, @NL80211_PKTPAT_PATTERN={0x8e, 0x2, "62474dabc383b4d56a47125c97050e9296c1b4ac8fefa11eb37e525b57220c16ede118b52afed1f686b0675f810bf9247d4564f8b9a348ba2b5ee7562cf585afe5a84d9bbd2e0770c22e8d4babc3335664391be5e7502a7b22a3b2ec225f1ba3352697d25c03053bdb53a2141420536b50d6524acd69ce3ea5186257b1789dd341c012f393bbca92bf65"}, @NL80211_PKTPAT_MASK={0x89, 0x1, "ba793215682c63b0747aaf0ab4f29ee6ac553f466a206b96b72a0a3699dc64a25378a71ff74e0e67a4c522f7b6744f5ff6c5ff70f46554812392f9397c2ae18adc2010e246a27dcc352320457a4741a5849ea9f3de825bdf53cf7b11adc780e5394e5ffb3a3e2ba3b41beb5eb89a3f1217781c388d7ffdfc6c11d3b21d789a6c161b319c36"}, @NL80211_PKTPAT_PATTERN={0xa2, 0x2, "5714f407d527740189f499e0bb935b9c2701a35abedd9d0258e23e5d3df3e6db9ab211e6d0d823cc7571af9c97bc97bdae523085d2a632a526fc038fe60317976a397ebc217aff3bd638c8658d28bdebe0d2a6124fc3c269637e792203539cb5f4a939f8f0422e1acc1d92aa09a57517c66ffe59478d68df903c3dd374476e9a90daafe4ebd9bc5089e5702cc12b5e9aacdd373c0df104f34a31287e48e6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0xee, 0x2, "c704cd63974a065eae88f79c539ca95f8443717d901459873515718202e9bf3eee8d952b3b073ade274af9c8c45e6f64fa4a4a12a31649dbf37ae7c73058666c249e5ee84881ea85b1e0be9c19b21a92591e3645b568b83cbdb4e3d3dc581e940973927fa3db680a508dd05226238f133aecfd4af8c2a31140a6bdb17e5f99063cb66a018fcd224446de1667834feadd13405c14790245c578e4b9d8ea2ce23bd86e9fed70b9402ec0b17dfb26a7e8ff058b1d96946be9614c4a05af69e476fa4ff00354427ed3b10286a6944b31135718b766df2d22399db7840bb239ed3d8b0aa8f93c904c12424321"}, @NL80211_PKTPAT_MASK={0x36, 0x1, "b91238d9531ad9fb4660dbbba4a11a04a14dd4b75a7ee578b04368f55c0fd2382e394ab24a57b640bf196d3563a6d246913b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}, {0x1330, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd9, 0x2, "a21d5f8e2ea812801e57699b899e6acf9205bdc3af08db2071b38ffa936e33472284a245edd4a0833206814c3de05193a95a832bc353ba04b1ed3b2ba2fb19d8449bc10607f63b064950c4d3b8b8403a6842f770d65fcc6b2e71b2b88cf8b1c09c843d1fc2ec53a967d34e092bfdecc51a43d173d19b5d3c72e38fb7a77bcfa2320f7222e3a2b3abb757bb2db31af9a24bfb1d23863655ebd21d268488d85ec67f641ccd6f56b6c5c4619654330a57249bc70f4d2fcf640b19f6884736030f9a2fa9a57c11e03da949ff2e6a765f929b8f61f2de1c"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9a}, @NL80211_PKTPAT_PATTERN={0x6a, 0x2, "496e2f3dadd625050d5c503db8c600b5949208eb36fc440a0c547efc214d029700244daedfe76f95058ba2ad0543b6ca098fc2a68b4f2d8551a237322a4fc3225d91d3bcc550385917b1a4c4b298fccc23e9120535ef418a2b6de6bee562bd0aea9db4cd754b"}, @NL80211_PKTPAT_MASK={0xef, 0x1, "e7b20be2fa7123ce7aa92b3fdc569e22b0c3e1f5883f8a084723cd4be517e70552edf55b7fa0367d442c6d9d34717e44bd1f3a7e22292d8f98061fcbe268cdec2ad115342349715d36b65433efd064a4dbc83f67cc146c53556d10629b18badaf8676292e83b709eae8e79900b79f6120b81507bef81e107409d70473b8e2c30c3158edd5e2a4258b3e4a564c55095efd1dfc58f1ed900b1bb14a4d3c53a5938ff6a4f541dce79e2779a14b10fb5558ccd04d943f9b581e089582376c31e8c574f3b27fedd61ff085280017337525f5a0884282e7a4df8b8039a2265b38aedea7d810504e176ff08206b22"}, @NL80211_PKTPAT_MASK={0xe6, 0x1, "5c28f5a01fefbfe417831ac75c292cee6aa9cd9b625e4f475484804072e8804b75e0b3f47b8f7a381533c9aaace8a3e07472ead1a9b13e9742b63c7e2d396ba797dacafc03d33dfe90694deec81bd9c7e8e38d3826da1bcbc4a91be4bbac68ae31d80c6f2993c122096e0d732a39a69b4b9f9f333843dd050ef909135bb53f1817294ee691a243edb7ba777cd0933ae47f53ecd92bf3c596f745ec17dec03ba2e6f8319109e29914e097bf5e689b900cf465fce50aac1dd73f9d7c318bb9bd54ccd9a60be392db78cbce1f0834501d9b1b34a9a704cf7768d08e26855d4e36fdcc4c"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xdd, 0x2, "eee4c17732264286b522e055c1ffe0abb0c2ea72f9627e6be340b83de506ccd93d47b8d02ecbf919f13a92431fb9c1d85e577dcc08ba931427a787027f9530cd436930166c4966c9dee4abdc25894019321d8806c9e02d78d51f80ec10ec9e911d4110affe523330617df0d8a7c49754e1665497dd563f8d3b21914c1550d345f74dd792d2332cbda258417a4c8c3164b1b7aad220eddb4fc7da42d0fc2b955c0c9f7d0328a91fa3708d2c8a7cf0a1ea39f58e32f7b845429eb2ab20c064d3ef21241b99969a185c12e2367c9c56a52883c7be9af27193387d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x200}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xdf, 0x2, "4908a2ecce82f08e7fd1a51a6b1737f038f90ee6dda5440d03536fff9fb6978d04224fd4feb1164008b761286c737a07e9cda0308fc32a058f03a239a0ccb776cd8e9dc03926ed23e81336d5f376541d355103e491a7d20ced9e8c414c3895df586175ca23fd029d7a1ebbef311c3f367cba31341632f97a8a0ce28c622ec645ad209b52022ee74fd5c5ff52be5914ccbe92b166da3babac58d707090b1b00dfb0ac3836537bae3ed10fe1b33db1768688a91a5db9f360d6a965f26509bfe2fca45607d1ee184a262371b8be470735973690de8d9b3b6ce71a4b45"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1b, 0x2, "59d6a275dccf30ee3e5c668dbf5c02f21107dfcdea2a0d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x26d4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x2360, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2354, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_2GHZ={0x96, 0x0, "08491aca58870988a7bbe5cd517933bf39b7756db66429461ea4fe7573abef0ea6d31cbda28a3f8fe83d28598c9765f738c0fda90e9687d46d9868b6d9abb4b3909821c6d4889cedc11887ece8de587c6e82cf22463415adcd20faf69dd5d5487fb311430b915e296bacb3b128dcf7b2c7869b18b0fa57c431dcffb0b0dd0ee7e83fb8428616c274e04eba38abcd67f9e073"}, @NL80211_BAND_6GHZ={0xbb, 0x3, "52d5cb531c35d3b5229568d17ff1ca84983e8a9b4a5504101282a6a1636cf19f9cccca5b9bdd88b946969e0e94665900efc1191ebd3faa3e19ad12fbd106b9504f357bf40ca1f13f19e6c0ef022e541a92289aafd57699617211a43a3317554e6dd92e67b99a314645732b697fff93873b827bcb4789077edba1109f2db272e1814abadd64d02cde46d229f8460d4d60988b3202b5032303ee5623c4237e93a0185b4ea581995ec93b6f6da4c176847397aa7995403701"}, @NL80211_BAND_60GHZ={0xc0, 0x2, "a23628716ed3b8ae5e2578e406449b6da1733df6b1518ea19ea687b19bc62c311ace480f8960b4cbf23a6599e3ed7dbcf054d53953dff964de44d5fc609e5548a74833e48ab416e98a133eaa62c039a3f50643a26567a7c6a89d0ebadf3fdcdfcba7a5828a5687987b1c09f3bf12292cf0c1af620a7a4ee04479fcd1da19e750253a364a0ec52a1c6d3bf0668646b46e56ccabf1600c84751950a104ad7d1167e6e52e11844262e10c740c0d5ad972949b6553d8dfc44ae5ef40032a"}, @NL80211_BAND_5GHZ={0x93, 0x1, "48637377460d180f72136bb3600a3c5fa3c8e9aa0ccd9fa1102dc620ae050e3d1e90ace2c7ae8e383bb07239774250c7925cd979a165915d384c45312041bdf1e96280b807ceb1c90a5e3872bf6bc52bdee4563b2532e11e5f305973fa0096e891e2f427c53a91ad4d5bce5968b671a9b68637e3ec4b31e97226978cfb1443c5c26da10ab8a51892d56e1d2672dde5"}, @NL80211_BAND_6GHZ={0xa0, 0x3, "f5420781c17985076db8a2d3649d5b057d9cf11cc2cc234a6e3df51252353c7e648f2de38f8ed7c22483b5f38b62ba2b2bee2b623c891c9ffd139a1a84054771f883671c637efca3c3ae0d1f81bdb329ba49cf73366d7ffd03316b7d6c9c1f8cb8e51d878eb4fb3cde863a0220a23b5f286da98799c90afd90fab27f097c923486b756282025668466c38cafd944deb7adbfdebbf6edb622dc5928cf"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x36c, 0x4, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x51eb}, @NL80211_PKTPAT_MASK={0xf7, 0x1, "6e1fbc302634cfb0ac21457d8f87272351a635f65e28a0d246bf76509a3a07a54988d13845eb00da0c5ad687335494e9096d93029e3648c05b43bcda831a6675e943ac34ce9dce8b54540be5e07c533ed9e22aced6bc7d715e20ceef661168f56a1954617e7f3aa0571773050f24fdb8c2886c207ec4a08619050cde7695fd1625b61fa5a82a84f83203d056b2439530c32e3d2cd9c954c48eca06f50f7e4d0ad7285fcfc5f944057bc172bbe97fac80d46f72befc49b973d0edcdf09901a707510e906a886f400e5696d7e503ef2c1aa76c44523a862464314b6988edd53db9a299144973879761037d5742696947d5702681"}, @NL80211_PKTPAT_MASK={0x63, 0x1, "1ae081e4abae87d43b92dc8ba566f69e2607244959808fe561fb531bb2053b28a93de0659fd6baa1fbececce56fbf664cd99cb628cdab1ae9cfd5993a0b61da53aea16e9725e6faa70db781eecf05322eb6e934db8aa9c5f582da5b2144552"}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_MASK={0x31, 0x1, "0fdd9a0f4b084e341969838687c7444ea598c7412f474582df401e075e7c13322e7d81f3eaece7f258578ebfa6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_MASK={0xad, 0x1, "294fb1bc07de09b20d30fc2f6d689641aa3c81296beb6c133afbf88f67d1b29bf7286ace8263f1f4cfba410665b1879677b03b823dc48c65a16e1df5fb95300982233dd41501588c529b6f08f4a17e942ab7dde513a514eb9dfd5eeb661fe6587a84f8e1c357f009893ef3065724b03cdcb031b62a16994b340f7390399d73ec8e3015f92d8480cf7699fa8ec41a40c819630f69467b1fb8f64a558e5cf5a5f27201d5995b63decc0c"}, @NL80211_PKTPAT_MASK={0x91, 0x1, "78d3da8c1abb35ddbb8bab18bc1c8953da82c5f274f8e217fc14f387b131471500fa2a3a4c557ea917a2b594911f6d5f54836093211bd6d9ed5c2a39b4d9857d7766c8babfcf0db298e868d32f942627f45d4bfa737ffd8e9d5e62e080ff207b58279aadd28bf7451a1a029a1583cee7157c4a93999d70fb9111f3be81fc8750763b7e4170db61da86f1e5dff8"}, @NL80211_PKTPAT_MASK={0x74, 0x1, "e33e529477cffbd1314b33276efa5e46b107da0b10d7d95c729768c36678d92f329f58cf8e93981ed2ce5d241c2f11ee55e6aeb3f1f2b1908f0197c1ac1f7ceb07c78e0f1a88784fb6e0d48cd7f910f2626063b571560d2f3c93a20e8dc7607b668cc189e588ffcbba7b10df01bfa272"}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x545c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x4000091) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x304, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8e4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x420bc326}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4af}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaaeb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc669}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x27}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "3f8bbff2c165a6ea9456e6b4d659d8869f38e99987dee7e3e8d415000dfbd344"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4514}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4080}, 0x852) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffe000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xd8}}, 0x0) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0xe}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x7ff}) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x2) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x8c}}, 0x0) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0xb7a0, 0x1d, [{0xb}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xd, 0x1}, {0x9}, {0x1, 0x1}, {0x9}, {0xa}, {0x5, 0x1}, {0x2, 0x1}, {0xf}, {0xc}, {0x0, 0x1}, {0xa}, {0x8, 0x1}, {0xd, 0x1}, {0x4}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x6}, {0x4}, {0x7, 0x1}, {0xd}, {0xf, 0x1}, {0xf}, {0x7, 0x1}]}) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r0, 0xfffffffffffffffe) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x8}}}, 0x7) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x7c}}, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x78, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x78}}, 0x0) 21:43:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x408000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x6, &(0x7f0000000080)="3c9dc7bae22b7899c62af9941707911b0d26032767971d34e0caebdd612fed789b7f3e752698fcf6ef"}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x202, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@empty, 0x19}) getsockname(r1, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80) 21:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x7c}}, 0x0) 21:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}]}, 0x5c}}, 0x0) 21:43:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read$usbfs(r0, &(0x7f0000000000)=""/124, 0x7c) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0x0, &(0x7f0000000080)="8f6fedd43c577b"}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000140)={0xa, 0x1}) 21:43:55 executing program 2: syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) socketpair(0x3, 0x1, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}, @NL80211_ATTR_IE={0xca, 0x2a, [@peer_mgmt={0x75, 0x8, {0x0, 0x8, @val=0xeef, @val=0x35, @void}}, @supported_rates={0x1, 0x2, [{0x3}, {0x60, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x4, 0x80, 0x19, 0x80}}, @measure_req={0x26, 0xae, {0x4a, 0x20, 0x5, "786403260917dd74f7009507ac8a11f2e32d90083e09745e480ba7e428de3e722433f49f23c029c8009757e08e6b474f3541b38ce8186d1d1017577c8cd28f947ef7b48ac02e37261d94139ca43ca9f63214801a6ac57a05f13744b02cf8d37b4b14d9efc5ea2da1cc4d879d947f8dcc97a145ad1d891d71b9249ccd57241013422a4bb6471c7cc23be9b605cbfa2ffa1e8d8e3aa4523db93e4134662933ccbe5cf27e36dd5d88ac6958eb"}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40841}, 0x4008010) r1 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) 21:43:56 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x440001, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x210840) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000040)=0x8001) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x10010, r1, 0x2) 21:43:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b3a5b8062b70f7f7f041f47b63fcad68974be21c618c"}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x7c}}, 0x0) 21:43:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x44}}, 0x0) 21:43:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x2, 0x6ca842) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000000)=""/212, 0xd4, 0x1, 0x0, 0x0) [ 2872.864965] BUG: unable to handle kernel NULL pointer dereference at 0000000000000030 [ 2872.872987] IP: amp_read_loc_assoc_final_data+0xe6/0x190 [ 2872.878447] PGD 7b7eb067 P4D 7b7eb067 PUD 7b7ec067 PMD 0 [ 2872.883996] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2872.888497] Modules linked in: [ 2872.891708] CPU: 1 PID: 8037 Comm: kworker/u5:5 Not tainted 4.14.218-syzkaller #0 [ 2872.899447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2872.908806] Workqueue: hci0 hci_rx_work 21:43:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7ffffffd, 0x40000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) read$char_raw(r1, &(0x7f0000000200)={""/40030}, 0x9e00) ioctl$CHAR_RAW_SECTGET(r1, 0x1267, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x0) 21:43:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xffffffffffffcad4) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x90020, 0x0) ioctl$CHAR_RAW_IOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=r2, @ANYBLOB="000427bd7000fcdbdf25280000000a0034000202020202020000060036004000000004005f001e00340035fa8dc520d49ed90cd85d5aca8b7717b6b737285a4fd8e3fd790000"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20008805) accept4$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80c00) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x40001) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="5b080b8c8f8a0a0a09090a05888a0b8d890b81010d01810c01db8d"]) 21:43:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/224, 0xe0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x0) 21:43:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x385041) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_disconnect={0x7}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x400280, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x60, 0x5, 0x401, 0x8, 0x34, 0x80, &(0x7f0000000000)="4c6d94112fbb38aac1ae79ffa75b27218c454b316ec665dfe14159ad608bb012471a7b9bf22bf8e4efae810d1e643c408d6c7d73"}) 21:43:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500000036713b67ad061ad126bcd3d49ea2e5344a0a3cdb6d49570fccc82484c9e925d9ee28b636bb1e2f066b365f69cc087eaed2167f4393c883a8d91e4436433d5c8a3c5df852c8c32dfd40c5fc35d69c5afef2f65a0911e2dc8ec926b1cddfb2623d8ad78aaa65263ec970b65d5a8b78d07074a32f561387012635f6e1781fe3f98164d6513881159941c96ed3db377a2197ae9163f04c575bf9028dea4d04a8443bad0240c0795c4cc2ba64bdb666580695e93b0da4225fd8eb42", @ANYRES16=r2, @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x8000) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1, 0x48302) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000280)) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x12, r3, 0xfffffffffffffffe) [ 2872.912781] task: ffff8880b2a54600 task.stack: ffff88807ae60000 [ 2872.918843] RIP: 0010:amp_read_loc_assoc_final_data+0xe6/0x190 [ 2872.924808] RSP: 0018:ffff88807ae67a08 EFLAGS: 00010246 [ 2872.930183] RAX: 0000000000000000 RBX: 1ffff1100f5ccf41 RCX: 1ffff1101654a9db [ 2872.937453] RDX: 1ffff1100f5c4893 RSI: ffff8880b0a78940 RDI: ffff88807ae24498 [ 2872.944723] RBP: ffff8880b0a78940 R08: 0000000000000000 R09: 0000000000000002 [ 2872.951992] R10: 0000000000000000 R11: ffff8880b2a54600 R12: ffff88807ae24100 [ 2872.959265] R13: 0000000000000000 R14: ffff88807ae24100 R15: ffff8880aac837c0 [ 2872.967233] FS: 0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 2872.975453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2872.981313] CR2: 0000000000000030 CR3: 000000007b7ea000 CR4: 00000000001406e0 [ 2872.988700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2872.995947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2873.003452] Call Trace: [ 2873.006021] ? amp_read_loc_assoc+0x140/0x140 [ 2873.010509] ? hci_chan_selected_evt+0x176/0x360 [ 2873.015243] ? lock_acquire+0x170/0x3f0 [ 2873.019377] ? lock_downgrade+0x740/0x740 [ 2873.024551] hci_chan_selected_evt+0x1b2/0x360 [ 2873.029142] hci_event_packet+0x2260/0x7510 [ 2873.033728] ? trace_hardirqs_on+0x10/0x10 [ 2873.037951] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2873.042943] ? hci_cmd_complete_evt+0xb490/0xb490 [ 2873.047770] ? trace_hardirqs_on+0x10/0x10 [ 2873.051994] ? debug_object_deactivate+0x1da/0x2e0 [ 2873.056908] ? skb_dequeue+0x125/0x180 [ 2873.060769] ? mark_held_locks+0xa6/0xf0 [ 2873.064806] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2873.069884] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2873.074900] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2873.080319] hci_rx_work+0x427/0xb40 [ 2873.084030] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2873.089460] process_one_work+0x793/0x14a0 [ 2873.093672] ? work_busy+0x320/0x320 [ 2873.097361] ? worker_thread+0x158/0xff0 [ 2873.101398] ? _raw_spin_unlock_irq+0x24/0x80 [ 2873.105870] worker_thread+0x5cc/0xff0 [ 2873.109749] ? rescuer_thread+0xc80/0xc80 [ 2873.113877] kthread+0x30d/0x420 [ 2873.117230] ? kthread_create_on_node+0xd0/0xd0 [ 2873.121881] ret_from_fork+0x24/0x30 [ 2873.125588] Code: 44 24 21 48 b8 00 00 00 00 00 fc ff df 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 90 00 00 00 41 0f b7 84 24 98 03 00 00 66 89 44 24 23 41 80 4d 30 04 48 8d 6c 24 40 4c 89 e6 48 89 ef e8 14 6c fe [ 2873.144958] RIP: amp_read_loc_assoc_final_data+0xe6/0x190 RSP: ffff88807ae67a08 [ 2873.152498] CR2: 0000000000000030 [ 2873.155943] ---[ end trace 3126650965a80d65 ]--- [ 2873.160816] Kernel panic - not syncing: Fatal exception [ 2873.167154] Kernel Offset: disabled [ 2873.170777] Rebooting in 86400 seconds..