[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. 2020/11/07 07:19:16 fuzzer started 2020/11/07 07:19:17 dialing manager at 10.128.0.26:34475 2020/11/07 07:19:17 syscalls: 1620 2020/11/07 07:19:17 code coverage: enabled 2020/11/07 07:19:17 comparison tracing: enabled 2020/11/07 07:19:17 extra coverage: enabled 2020/11/07 07:19:17 setuid sandbox: enabled 2020/11/07 07:19:17 namespace sandbox: enabled 2020/11/07 07:19:17 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/07 07:19:17 fault injection: enabled 2020/11/07 07:19:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/07 07:19:17 net packet injection: enabled 2020/11/07 07:19:17 net device setup: enabled 2020/11/07 07:19:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/07 07:19:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/07 07:19:17 USB emulation: enabled 2020/11/07 07:19:17 hci packet injection: enabled 2020/11/07 07:19:17 wifi device emulation: enabled 07:20:19 executing program 0: getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @val={0x0, 0x4, 0x6, 0x900, 0x81, 0x9}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x26) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="47b63b8f85ddae7d030a92b3b98e4c247aeec06870892eb713a21f8b5d1046772275e402ed48541fbd39011e584112c6a8222916778b520b2f698d50f44599dd2cea22b07540817f0c46d1ddb96e84f129ab3b9e4d990e9d5405396704f290e8e05aac2159b5c1097a3215f567ef2e35f7cfcfb60092ba7f2fc9fb6235fa28353cbb88181d396c6c33e2b574029a57909fd32497de9ae186377c66d9a596d0168ad083a26e00ad35f56f3d65d63f39cd4bb86f80eed3be", 0xb7, 0x4000000, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000200)=0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x1, 'ip_vti0\x00', {}, 0x6}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x2, @multicast1}], 0x60) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xac}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={r1}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfff3, 0x2}, {0xfff3, 0xffff}, {0xb, 0xffe0}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x7}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000011) sendmsg$can_raw(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x1d, r0}, 0x10, &(0x7f00000006c0)={&(0x7f0000000680)=@can={{0x4, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "3d1ebf3a7f612e9a"}, 0x10}}, 0x40c8889) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) socketpair(0xa, 0x4, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000780)={@none, 0x7fffffff}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000800)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x48) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000980)=""/165, &(0x7f0000000a40)=0xa5) 07:20:19 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80000) clock_gettime(0x5, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) getsockopt$rose(r2, 0x104, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$sock_netdev_private(r2, 0x89fb, &(0x7f0000000340)="3bf3c27950c734543706dca142ea79a6f68707248ac117d84d32e67f03627713a8ca32c5ccf79e7d6f32b0458361c294feafa3ec9159622e8feb0ff069f2dec82f6ad9943b2b717b7ebea6401ded84231008733148bc585abdc2ba2e87bb588d41aed25b6537de470300d89bd2a10eb403bbc8fc6f3d8f741047d4fb7792f8811597a518e96c1b3a0fb887bbf858f2bdf26e64da28ebb6123a276c88fc7121beb1357c73a502789544df82dd7e45d4d639c659c8f799cfd980abe5b6c9122e459298be7055ae2c7f31e9f483205c137bd6f0fb1672967b5cc8b55b1a4fd5c21561e95ab08103fb3cce33e3") pipe(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000016c0)={&(0x7f0000000440)="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", &(0x7f0000001440)=""/254, &(0x7f0000001540)="ba290d8d2581cb4689ef11822fc67dfa777cea885ed759e60dbda18107b5293a24be3e0d76c8dd765d0296a5a3124f285de5851496a19ea09485b62221c52a45ee0be523361230a2480f590dc5d0c667fb82d1c92db5ab69016d61c8f678d073b541de9a2447c64026748697bfd4746282c3fe", &(0x7f00000015c0)="879b25800ba1b428d6147af893fc2494e9300fb0585dbf78feabb57af7fdc99279a497d345e5fe7f95e25b01ec7441a7bf4028bb5bfe3038d63fc0280368259378b9c6a5141609574fb38011cc7d7b83cda97948c7c43ecf34f581458835d9afdb9be6ba14e10ff5f0ae7989d94fbbf1c646a6d8de9943787c08e52cb1a1fcd66fc959b491aa6858706ff6e8a3308385fcde454f1d8d3e361b793d6416743d8a55ebf93f608c4f6dceb84b25", 0xfffffe01, r4}, 0x38) ppoll(&(0x7f0000001700)=[{r3, 0x80}, {r1, 0x4}], 0x2, &(0x7f0000001740)={0x77359400}, &(0x7f0000001780)={[0x8ba]}, 0x8) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f00000017c0)="9144") accept$inet6(r3, &(0x7f0000001800)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001840)=0x1c) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000001940)={&(0x7f0000001880), 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xd4, r5, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "027792715fb9736aeec8fb96dc9cc2abc52bbd34621bcedd"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x4004000) pipe(&(0x7f0000007e00)={0xffffffffffffffff}) bind$inet(r6, &(0x7f0000007e40)={0x2, 0x4e21, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000007fc0)={&(0x7f0000007e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007f80)={&(0x7f0000007ec0)={0xa0, r5, 0x303, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x600000d0}, 0x20000080) 07:20:19 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x2, 0x9, [0x8000, 0xa0, 0x81, 0x0, 0x0, 0x0, 0x3, 0xd3, 0x0]}, &(0x7f0000000100)=0x1a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0xe05, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004081}, 0x20040800) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000003c0)={@ipv4={[], [], @empty}, 0x69, r0}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={r1, 0x2c}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9, 0xce, 0xfffffffffffffffe, 0x1000, 0x1, 0x1, 0xee5, 0x2, 0x161, 0x8000, 0xfffffffffffffffe, 0x9, 0x8, 0x4e7, 0x2]}, &(0x7f0000000580)=0x100) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbab, 0x1d}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x27ba, 0x20, 0x6f, 0x3, 0x6, 0x8]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x367}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x21}}}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, "90"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f85714eabf5a084fda"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "036eedd25f827933126dc1502b"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x40000) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd8, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x48080) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, @multicast1}, &(0x7f0000000a80)=0x10, 0x800) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@multicast2, @in=@empty}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0xe8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c00)={0x0, 0x4}, &(0x7f0000000c40)=0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7a}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000e80)={r2, 0x1}, &(0x7f0000000ec0)=0x8) 07:20:19 executing program 3: ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom$rose(0xffffffffffffffff, &(0x7f00000000c0)=""/58, 0x3a, 0x40002100, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f00000003c0)={0x964, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x5}, 0x40, 0x9d, 0x3, 0x5, 0x13, 'syz0\x00', "f094dd9d8ba2c643285c9a4fc2347772f0b93b31e92443b0a864317433eb23bf", "6107aca51eba90dc7bd18226e8bcf102694d7463fb7c827c16138432d5ca574c", [{0x8, 0x9, {0x2, 0xfffff801}}, {0x5, 0x4, {0x3, 0x6}}, {0x46c, 0x37, {0x0, 0x10000}}, {0x7, 0x7c4, {0x1, 0x1a}}, {0x4, 0x8, {0x0, 0x2}}, {0x7, 0x8001, {0x2, 0x5}}, {0x6, 0x101, {0x1, 0x3}}, {0x2, 0x200, {0x2, 0x8bc}}, {0x5d3, 0x6, {0x2, 0x1ff}}, {0x8000, 0x8, {0x3, 0x1}}, {0x3, 0x6, {0x0, 0xadd}}, {0xa5, 0x9, {0x3}}, {0x401, 0xfe01}, {0x0, 0x4, {0x0, 0x10001}}, {0x80, 0x8, {0x0, 0x800}}, {0x400, 0xfe00, {0x2, 0xa23f}}, {0x9, 0x1f, {0x1}}, {0x0, 0x3, {0x0, 0x2}}, {0x1, 0x200, {0x2, 0x1000}}, {0x9, 0xfff, {0x1, 0x20}}, {0xc46, 0x9, {0x0, 0x6}}, {0x8000, 0x1ff, {0x2, 0x3}}, {0x4, 0x7ff, {0x0, 0x800000}}, {0x3, 0x7, {0x0, 0x3}}, {0x1, 0x5, {0x3, 0xfff}}, {0x200, 0x7ff, {0x1, 0x5}}, {0x7, 0x101, {0x3, 0x200}}, {0x9, 0xb203, {0x0, 0x200}}, {0x6, 0x9, {0x2, 0x7a3}}, {0x26f8, 0x80, {0x0, 0x3}}, {0x400}, {0xfff, 0x6, {0x0, 0x8}}, {0x1f, 0x9, {0x1}}, {0x1, 0x8, {0x0, 0xffff}}, {0x1, 0x7fff, {0x2, 0x2}}, {0xfffe, 0xa11f, {0x0, 0x10001}}, {0x198, 0x81, {0x1, 0x3ff}}, {0xb8, 0xaca}, {0x9, 0x5, {0x1, 0x8001}}, {0xb83e, 0x8, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x0, 0x0, 0x7, 0x5, 0x9, 'syz0\x00', "a65087c6dfab04d09409f60a3cd2880beace39c4f6f587e516d09494e9fad2a9", "552a020ae256d357f147ef97ac0f6f5a857cae55cc5deb3f32fe0ebd30490b9b", [{0x1, 0xaa, {0x2, 0x6}}, {0x9e, 0x0, {0x3, 0x6}}, {0x3ff, 0x9, {0x0, 0x3f}}, {0x1, 0x0, {0x3, 0xffffffff}}, {0x0, 0xb324, {0x3, 0x7f}}, {0x4, 0x3, {0x1, 0x6}}, {0xf7, 0x2, {0x2, 0xee}}, {0x0, 0x2, {0x2, 0xf4}}, {0x5, 0x6, {0x2, 0x9}}, {0x1638, 0x3, {0x2, 0x64a3}}, {0x80, 0x8, {0x1, 0x361}}, {0x0, 0x2, {0x3, 0x8000}}, {0x80, 0x1000, {0x0, 0x101}}, {0x8, 0x23, {0x0, 0x7f}}, {0x2, 0xce, {0x3, 0x5}}, {0x7, 0x400, {0x2, 0x10000}}, {0x1, 0xffa9, {0x0, 0x1}}, {0x4, 0x2, {0x2, 0x2}}, {0x1ff, 0x1900, {0x3, 0x1}}, {0x5, 0x5, {0x2, 0x400}}, {0x100, 0xffff, {0x0, 0x4}}, {0x2, 0x1, {0x2}}, {0x3ff, 0x40, {0x0, 0x8}}, {0x5, 0x592, {0x2, 0x10001}}, {0x1, 0x7, {0x2, 0x6}}, {0x5, 0x1f, {0x2, 0x8}}, {0x4, 0xa05e, {0x3}}, {0x2, 0x6, {0x0, 0x9}}, {0x1, 0x9, {0x0, 0x7}}, {0x4, 0x8000, {0x0, 0x80000001}}, {0x2, 0x0, {0x3, 0x6}}, {0x8, 0x3ff, {0x0, 0x7fffffff}}, {0x9, 0x5, {0x0, 0x7}}, {0x7c, 0xfff, {0x2, 0x9b}}, {0x2, 0xff11, {0x3, 0x3}}, {0xfd0, 0x4, {0x1, 0x101}}, {0x800, 0xfffd, {0x0, 0x8001}}, {0x2, 0x7ff, {0x3, 0x8001}}, {0xf001, 0x2, {0x0, 0x9}}, {0x0, 0xdc, {0x2, 0x161}}]}}}, {{0x254, 0x1, {{0x2, 0x80000000}, 0x7, 0x3f, 0x144, 0x1, 0x20, 'syz1\x00', "2e20de9d1772c46edf9df3921cb77dfa13bfb3ea7f941b72a974865e45957d16", "55507f73c13b801b0b7cc3f33251e4dc242d56fa6b1751915263cfae3e190054", [{0x0, 0x3, {0x1, 0x3}}, {0x401, 0x100, {0x0, 0x2}}, {0x6, 0xff, {0x1, 0x2}}, {0x1, 0x1000, {0x0, 0x2}}, {0x1, 0x89, {0x0, 0x9}}, {0x9, 0xca53, {0x3, 0x9}}, {0x4746, 0x4, {0x3, 0x1}}, {0x9, 0xff22, {0x0, 0x9}}, {0xfff, 0x3, {0x2, 0x9}}, {0x4, 0xf960, {0x2, 0x7fff}}, {0x20, 0x2, {0x2, 0x4}}, {0x7db, 0x7, {0x2, 0x80}}, {0x8, 0x0, {0x0, 0x7ff}}, {0x4, 0x7f, {0x3, 0x9}}, {0x1000, 0xf800, {0x0, 0x28}}, {0x5, 0x0, {0x2}}, {0xd8, 0x0, {0x3, 0x5}}, {0xfff7, 0x49, {0x2, 0x7}}, {0x1000, 0x6, {0x1, 0x4fa}}, {0x7, 0xce, {0x1, 0x1}}, {0x0, 0x8, {0x3, 0x1}}, {0x8, 0x15, {0x0, 0x7ff}}, {0x8000, 0x1, {0x3, 0x5}}, {0xff, 0x592, {0x2, 0x76486f7d}}, {0x100, 0x5bb, {0x0, 0x3}}, {0x8, 0x85c0, {0x3, 0x72d}}, {0xfff9, 0x5, {0x2, 0x4}}, {0x276, 0x8, {0x0, 0x72}}, {0x1, 0x7, {0x1, 0x2}}, {0x9, 0x8, {0x0, 0x400}}, {0x7e3, 0xf800, {0x1, 0x10000}}, {0x4, 0x400, {0x3, 0x2}}, {0x20, 0x5, {0x5b31c5b4b3637c5f, 0xb5}}, {0x3, 0xde7, {0x2, 0x400}}, {0xb68, 0x1f, {0x2, 0x4}}, {0x9, 0xfeb0, {0x1, 0x9}}, {0x200, 0x401, {0x3, 0x6}}, {0x8, 0x2, {0x2, 0xd5}}, {0x5, 0x5, {0x3, 0x8}}, {0x8, 0x100, {0x2, 0x7ff}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x80, 0x0, 0x98, 0x4, 0x1f, 'syz0\x00', "0077dfe6e94e38c348d10896699477d4e64be171144e3ef51d84da658c753e1b", "d5f7a97f61c38e58e0fc57d84ab9a5b2964bfaf2c7e2332c1fdf4d68652a9180", [{0x7, 0x1, {0x0, 0x7ff}}, {0x4, 0x1, {0x0, 0x8}}, {0x400, 0x2, {0x1, 0x5}}, {0x3, 0x5, {0x3, 0x1}}, {0x7, 0x5, {0x0, 0x9}}, {0x8, 0x7fff, {0x3, 0x8}}, {0x40, 0xffff, {0x2, 0x7}}, {0x4, 0x1, {0x1}}, {0x38cd, 0x200, {0x2, 0x7ff}}, {0x1, 0x6, {0x1, 0x401}}, {0x8, 0xfff8, {0x0, 0x55b69209}}, {0xfffa, 0x2, {0x3, 0x9}}, {0x5, 0x0, {0x1, 0x6}}, {0x6, 0x4, {0x2, 0x5}}, {0x6, 0x3, {0xefb340eb7ae9291, 0x9}}, {0x48d, 0x81, {0x1, 0x7}}, {0x40, 0x1, {0x2, 0x80000001}}, {0x0, 0x401, {0x3, 0x5}}, {0x4000, 0x9c, {0x3, 0x8}}, {0x3ff, 0x3, {0x1, 0x3}}, {0x2e, 0xf4}, {0x2, 0xcda9, {0x1, 0x20}}, {0x1, 0x200, {0x844fb564e0a89d1e, 0x3}}, {0x7, 0x0, {0x3, 0x2}}, {0x1, 0x4, {0x1, 0x3ff}}, {0x8, 0x7, {0x1, 0x401}}, {0x9, 0x2, {0x1, 0x9}}, {0x4, 0x1000, {0x2, 0x7f}}, {0x6, 0x20, {0x0, 0x7}}, {0x1, 0x9, {0x1}}, {0xb41}, {0x5, 0x5, {0x2, 0x6d6b}}, {0x5, 0x100}, {0x7c, 0x800, {0x3, 0x3}}, {0x40, 0x6, {0x0, 0xffff}}, {0x8a, 0x400, {0x2, 0x5}}, {0xfffe, 0x9, {0x2, 0xa11}}, {0x80, 0x3ff, {0x0, 0x9}}, {0x7, 0x1, {0x3, 0x3}}, {0xff, 0x44, {0x1}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20051}, 0xc4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001380)={0x40, 0x3, 0x1}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001a40)={r0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008100)=[{{&(0x7f0000001ac0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001b40)=""/160, 0xa0}, {&(0x7f0000001c00)=""/197, 0xc5}, {&(0x7f0000001d00)=""/110, 0x6e}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/183, 0xb7}], 0x5}, 0x3}, {{&(0x7f0000002ec0)=@sco, 0x80, &(0x7f0000005380)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/202, 0xca}, {&(0x7f0000005040)=""/7, 0x7}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/231, 0xe7}, {&(0x7f00000051c0)=""/178, 0xb2}, {&(0x7f0000005280)=""/195, 0xc3}], 0x8, &(0x7f0000005400)=""/35, 0x23}, 0xcb38}, {{&(0x7f0000005440)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006540)=[{&(0x7f00000054c0)=""/87, 0x57}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x2, &(0x7f0000006580)=""/221, 0xdd}, 0x6}, {{&(0x7f0000006680)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006700)=""/184, 0xb8}, {&(0x7f00000067c0)=""/63, 0x3f}, {&(0x7f0000006800)=""/224, 0xe0}], 0x3, &(0x7f0000006940)=""/211, 0xd3}, 0x5e4}, {{&(0x7f0000006a40)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000006ac0)=""/162, 0xa2}, {&(0x7f0000006b80)=""/65, 0x41}], 0x2}, 0x7}, {{&(0x7f0000006c40)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000008080)=[{&(0x7f0000006cc0)=""/26, 0x1a}, {&(0x7f0000006d00)=""/180, 0xb4}, {&(0x7f0000006dc0)=""/53, 0x35}, {&(0x7f0000006e00)=""/245, 0xf5}, {&(0x7f0000006f00)=""/33, 0x21}, {&(0x7f0000006f40)=""/23, 0x17}, {&(0x7f0000006f80)=""/241, 0xf1}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x8}, 0x8000}], 0x6, 0x4000, &(0x7f0000008280)={0x77359400}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000008340)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x240002}, 0xc, &(0x7f0000008300)={&(0x7f00000082c0)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4c040) getsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f0000008380)=""/129, &(0x7f0000008440)=0x81) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000008480)='bbr\x00', 0x4) r4 = accept$netrom(0xffffffffffffffff, &(0x7f00000084c0)={{0x3, @netrom}, [@remote, @bcast, @null, @netrom, @netrom]}, &(0x7f0000008540)=0x48) getsockname$netrom(r4, &(0x7f0000008580)={{0x3, @rose}, [@null, @remote, @bcast, @rose, @remote, @null, @null, @default]}, &(0x7f0000008600)=0x48) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000008640)={'bond_slave_1\x00'}) sendmsg$nl_netfilter(r2, &(0x7f0000008900)={&(0x7f0000008680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000088c0)={&(0x7f00000086c0)={0x1fc, 0x6, 0x6, 0x201, 0x70bd26, 0x25dfdbfc, {0xc}, [@typed={0x8, 0x38, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x1b9, 0x69, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="b47e9d93a9c2931895ebda8089835a8de409bf643876188f977cad6aa5aaba3e22e0f53679750fc9b82c3883084bad95332dc8aea70948c13aeff016afb4a49aa1dddab7f5de52ee08151c69e20de401dbe491b07bead7666527baf18c94d16014d4560399c58f028aedf2028c27086bdec0ba5f1ccb523e3c60161da35d7a27ff393eac28d2cd8ce5909d028f793c7198e7d44d0108bec6afe777a1b9781ea047acada5cefb2c", @generic="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", @typed={0xc, 0x74, 0x0, 0x0, @u64=0x4}]}, @nested={0x24, 0x48, 0x0, 0x1, [@typed={0x20, 0x36, 0x0, 0x0, @binary="72db5d4a201df189228bf33883bc4c55ff798244997d2181e34a6fd5"}]}]}, 0x1fc}}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000008a00)={&(0x7f0000008940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000089c0)={&(0x7f0000008980)=@getneightbl={0x14, 0x42, 0x300, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000810) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000008a40)={0x0, 0x13, [], [@jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x50, {0x1, 0x12, 0x2, 0x9, [0x5, 0x0, 0x5, 0x9, 0x8, 0xd6, 0x1f, 0x101, 0x7fc000000000000]}}, @pad1, @generic={0x8f, 0x39, "3b3c1c62c72817c51c0fdd7bcb39249ad6224177081435c8d89021552950db241f4c83a023a730f32da8a8c66256d693842f97f8890bbcdc5e"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x3}]}, 0xa8) 07:20:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0xc083) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x554, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#&:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-.^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[-&\\..(:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "021c3ef48ce0f24cc566f4844f87782739df8e0c1e072d2c3c0d9bc244f9cad42e2cfe7d069e276fd2f1c67966a5d4447f582833172da1f6d0b45de516dc60b5e7edcc2fc15bad56b11d5a1c59e72cfe8836c5bde378a0097328c0f52d626164e5b1a3b5b6f1bf71d302e5140ccbf2acd5438c4c0fca60d4d282d62b5feec3b8618671c331f7fbde1bc30e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^.^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\\\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbf3}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "270c3135939ee8430d57609d47c74fda81b3f37571da7fa66d347110adccae54092180f51e6f0adc8071a50bb6ed0664892f5740afa1e910cb0b4bb05059a93242689998174acba3afe2abaab8911b4949f7188cc21d84f37540cfc33bbfabef0c7d458ca3c533c72ed023ed0287ce74a4a1ede7c29810aa4b821a5ef1f0c0d996d695251547d8dfffd5cbdc6b8d511962e5d4dbfe386142f7ee63b186182f04179d8da410dd4f678d987716"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc578}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x9e, 0x4, "d5b59801aec32dcb83dddae9f4b50df5f175d0ac8585a617a7e07822dbe33fc15638ad6cfea4d2456737a148de1b508a2ee86f20a0e9d6a322011ac3a81b5ecbc2e727520fbc46f36b6c683973241d0dff0340d1af51284460d1ff718410da7be4b2ed194d269f8edf45da713c2d870d7d303f203ad6840f2a5d96b98a9b0f74190b79be938b17123bfa8f4baf42d5b0417efb6ac4bfc9f70d3d"}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "dde024f8690a574dfcf26ecfc093548d3915cd9643167bdd6ac5787c12b01c83f2dc2d29c8ef66989eec32699c538928d0cd9332c0f47ef51bf3eb5c661f55d077ea88e32af72014fba6ade452a406b1e4dc2bbcd622068d9c70df5f53c5006be84086f5c4e0dc4ef93e501bd9983809f505686ebf325c41ed38e0db3235d65ba7b5958fabad6f136be88a7343d320980d82b72c3994fa7942327af428d47a17900ac86101ddf8c59eec2881a044740dc69c26188e14c6bd28801c9eee40e37bb00b92f4c36a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ')\x1c!@-&*!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x554}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0xd1a243519d44dc96, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x800) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8051}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x5) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000009c0)={r1}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000004900)={&(0x7f0000004640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004880)=[{&(0x7f00000046c0)=""/174, 0xae}, {&(0x7f0000004780)=""/78, 0x4e}, {&(0x7f0000004800)=""/79, 0x4f}], 0x3, &(0x7f00000048c0)}, 0x20) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000004a80)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000004b80)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000004b40)={&(0x7f0000004ac0)={0x5c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x400c1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000004d00)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000004e00)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x40, r4, 0x900, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'E'}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000004e40)={'batadv0', 0x32, 0x33}, 0xa) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000006080), 0x8) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000006180)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006140)={&(0x7f0000006100)={0x28, r0, 0x500, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000006200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000062c0)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)={0x40, r7, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 07:20:20 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)=""/181, 0xb5}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4, &(0x7f0000000340)=""/86, 0x56}, 0x2000) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@remote={[], 0x3}, 0x2, 'veth0_to_bridge\x00'}) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000500)=0x1) r1 = accept4(r0, &(0x7f0000000540)=@x25={0x9, @remote}, &(0x7f00000005c0)=0x80, 0xc0800) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008054}, 0x50c0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe00000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8d9}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x4040840) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000940)={'wg0\x00', &(0x7f00000008c0)=@ethtool_link_settings={0x4c, 0x80000000, 0x3f, 0x20, 0x40, 0x3c, 0x81, 0x81, 0x1, 0x81, [0x400, 0x7, 0x2, 0x4, 0x8b1a, 0x200, 0x0, 0xfffffffc], [0x61, 0x7f, 0xf25, 0x5, 0x7f, 0x10001]}}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4657}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20040080) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000a80), &(0x7f0000000b00)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80)='nl80211\x00') sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="20742c1eef1f"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e2b1d2e6a6abe237e7e8dea033ff88a1"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="7247619dad0e972c5837b38d7a82"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008804}, 0x20000000) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000cc0)) recvmsg$can_raw(r1, &(0x7f0000002200)={&(0x7f0000000d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000d80)=""/63, 0x3f}, {&(0x7f0000000dc0)=""/12, 0xc}, {&(0x7f0000000e00)=""/139, 0x8b}, {&(0x7f0000000ec0)=""/73, 0x49}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/127, 0x7f}, {&(0x7f0000001fc0)=""/164, 0xa4}], 0x7, &(0x7f0000002100)=""/216, 0xd8}, 0x2) connect$rds(r3, &(0x7f0000002240)={0x2, 0x4e23, @private=0xa010102}, 0x10) r4 = accept4$vsock_stream(r3, &(0x7f0000002280)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) readv(r4, &(0x7f00000023c0)=[{&(0x7f00000022c0)=""/227, 0xe3}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440)='nl80211\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x8c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2e}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x342}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10c}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0xc5) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000025c0)={'macvlan1\x00', {0x2, 0x0, @multicast1}}) syzkaller login: [ 128.375294][ T8508] IPVS: ftp: loaded support on port[0] = 21 [ 128.614423][ T8510] IPVS: ftp: loaded support on port[0] = 21 [ 128.658330][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 128.871100][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 128.901262][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.910591][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.921562][ T8508] device bridge_slave_0 entered promiscuous mode [ 128.943437][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.952973][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.961915][ T8508] device bridge_slave_1 entered promiscuous mode [ 128.976879][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 129.023649][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.059748][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.123552][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 129.182224][ T8508] team0: Port device team_slave_0 added [ 129.201291][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.208783][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.226541][ T8510] device bridge_slave_0 entered promiscuous mode [ 129.237618][ T8508] team0: Port device team_slave_1 added [ 129.243546][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.251273][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.262546][ T8510] device bridge_slave_1 entered promiscuous mode [ 129.366340][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.405141][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.413706][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.441762][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.462080][ T8516] IPVS: ftp: loaded support on port[0] = 21 [ 129.468089][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.475118][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.517687][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.557911][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.602607][ T8510] team0: Port device team_slave_0 added [ 129.648975][ T8510] team0: Port device team_slave_1 added [ 129.722039][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 129.738852][ T8529] IPVS: ftp: loaded support on port[0] = 21 [ 129.749211][ T8508] device hsr_slave_0 entered promiscuous mode [ 129.759141][ T8508] device hsr_slave_1 entered promiscuous mode [ 129.833242][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.841598][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.869505][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.883905][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.891598][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.920004][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.040884][ T8510] device hsr_slave_0 entered promiscuous mode [ 130.048976][ T8510] device hsr_slave_1 entered promiscuous mode [ 130.056721][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.064465][ T8510] Cannot create hsr debugfs directory [ 130.215676][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 130.240982][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.248743][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.256923][ T8514] device bridge_slave_0 entered promiscuous mode [ 130.267587][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.274648][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.283409][ T8514] device bridge_slave_1 entered promiscuous mode [ 130.336195][ T56] Bluetooth: hci0: command 0x0409 tx timeout [ 130.395704][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.409235][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.455004][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 130.581531][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 130.622039][ T8514] team0: Port device team_slave_0 added [ 130.664654][ T8514] team0: Port device team_slave_1 added [ 130.682780][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 130.748934][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.756638][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.767064][ T8512] device bridge_slave_0 entered promiscuous mode [ 130.775175][ T8508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.800861][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.811573][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.839277][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.851046][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 130.870532][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.882809][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.891378][ T8512] device bridge_slave_1 entered promiscuous mode [ 130.904963][ T8508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.918537][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.927253][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.934998][ T8516] device bridge_slave_0 entered promiscuous mode [ 130.944631][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.956488][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.982730][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.012009][ T8508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.025742][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.032825][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.045540][ T8516] device bridge_slave_1 entered promiscuous mode [ 131.056110][ T4896] Bluetooth: hci3: command 0x0409 tx timeout [ 131.083321][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.111186][ T8508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.132128][ T8510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.149617][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.167746][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.220460][ T8510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.231465][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.258211][ T8512] team0: Port device team_slave_0 added [ 131.267659][ T8514] device hsr_slave_0 entered promiscuous mode [ 131.279952][ T8514] device hsr_slave_1 entered promiscuous mode [ 131.286793][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.294345][ T8514] Cannot create hsr debugfs directory [ 131.299903][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 131.306704][ T8510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.319299][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.326527][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.334294][ T8529] device bridge_slave_0 entered promiscuous mode [ 131.353411][ T8512] team0: Port device team_slave_1 added [ 131.368272][ T8510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.389863][ T8516] team0: Port device team_slave_0 added [ 131.399233][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.406987][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.414799][ T8529] device bridge_slave_1 entered promiscuous mode [ 131.448898][ T8516] team0: Port device team_slave_1 added [ 131.455056][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.462833][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.489092][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.504108][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.511466][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.538334][ T4896] Bluetooth: hci5: command 0x0409 tx timeout [ 131.544939][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.563329][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.575366][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.628808][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.635995][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.663087][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.715376][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.729467][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.756910][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.799753][ T8529] team0: Port device team_slave_0 added [ 131.813450][ T8512] device hsr_slave_0 entered promiscuous mode [ 131.821246][ T8512] device hsr_slave_1 entered promiscuous mode [ 131.828527][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.836714][ T8512] Cannot create hsr debugfs directory [ 131.871463][ T8516] device hsr_slave_0 entered promiscuous mode [ 131.879710][ T8516] device hsr_slave_1 entered promiscuous mode [ 131.889208][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.898030][ T8516] Cannot create hsr debugfs directory [ 131.911310][ T8529] team0: Port device team_slave_1 added [ 132.003254][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.015611][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.043300][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.084161][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.091713][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.118552][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.159996][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.237354][ T8529] device hsr_slave_0 entered promiscuous mode [ 132.246377][ T8529] device hsr_slave_1 entered promiscuous mode [ 132.253126][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.261374][ T8529] Cannot create hsr debugfs directory [ 132.279587][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.310684][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.321267][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.399503][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.412425][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.415605][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 132.421976][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.433733][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.444393][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.484508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.505280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.516747][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.523823][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.532325][ T8514] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.547744][ T8514] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.601254][ T8514] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.613609][ T8514] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.640224][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.656327][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 132.694544][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.702754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.712883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.722491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.731628][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.740800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.757544][ T8516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.770202][ T8516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.808215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.818343][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.828179][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.837157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.844866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.866297][ T8516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.906046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.914452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.931569][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.939864][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 132.953442][ T8516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.969747][ T8512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.983423][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.013871][ T8512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.059897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.078308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.089607][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.096757][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.127511][ T8512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.141070][ T9805] Bluetooth: hci3: command 0x041b tx timeout [ 133.149873][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.163279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.171455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.184564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.194085][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.208106][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.215307][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.244812][ T8512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.268505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.281607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.300285][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.344310][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.353581][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.368548][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.375536][ T9621] Bluetooth: hci4: command 0x041b tx timeout [ 133.385829][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.395047][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.408659][ T8529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.424828][ T8529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.434808][ T8529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.479383][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.492600][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.502296][ T8529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.543941][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.554160][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.563749][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.572746][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.584145][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.615588][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 133.663072][ T8508] device veth0_vlan entered promiscuous mode [ 133.673670][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.682467][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.690412][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.700943][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.714293][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.731862][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.747888][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.756898][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.778681][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.808149][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.816516][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.829686][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.841032][ T8508] device veth1_vlan entered promiscuous mode [ 133.856406][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.886269][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.894351][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.905184][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.913754][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.923096][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.932159][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.939471][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.947891][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.956973][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.966207][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.027826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.044327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.054305][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.061587][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.070573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.079642][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.088310][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.095504][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.104046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.113595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.122536][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.129835][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.138492][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.147532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.160573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.168777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.214574][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.224008][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.234273][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.243240][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.261566][ T8510] device veth0_vlan entered promiscuous mode [ 134.291433][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.300053][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.313646][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.322282][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.331270][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.340503][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.349877][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.359276][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.368368][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.378708][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.395087][ T8514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.411712][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.422025][ T8508] device veth0_macvtap entered promiscuous mode [ 134.434811][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.455899][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.463635][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.472265][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.480704][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.490385][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.496016][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 134.499178][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.529055][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.538133][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.549578][ T8508] device veth1_macvtap entered promiscuous mode [ 134.563961][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.599841][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.616472][ T8510] device veth1_vlan entered promiscuous mode [ 134.645834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.653921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.683700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.694557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.703281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.712118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.720589][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.729710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.747412][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 134.764961][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.779282][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.789815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.801998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.812338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.824928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.838598][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.877740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.891135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.900439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.908835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.918000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.927245][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.934301][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.943092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.952146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.960691][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.967936][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.977350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.987123][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 134.988333][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.011029][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.044071][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.052970][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.072654][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.081807][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.094310][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.101964][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.115756][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.124333][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.148779][ T8508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.158843][ T8508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.173350][ T8508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.184221][ T8508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.211664][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.216229][ T9621] Bluetooth: hci3: command 0x040f tx timeout [ 135.228942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.238737][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.247705][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.254757][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.263139][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.272501][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.281507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.290884][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.300785][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.310142][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.319215][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.326371][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.338434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.346439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.355026][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.368798][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.387430][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.406676][ T8510] device veth0_macvtap entered promiscuous mode [ 135.428109][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.440584][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.450666][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.468061][ T9621] Bluetooth: hci4: command 0x040f tx timeout [ 135.474458][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.488830][ T8510] device veth1_macvtap entered promiscuous mode [ 135.505510][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.513670][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.523647][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.532784][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.542044][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.552337][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.613751][ T8514] device veth0_vlan entered promiscuous mode [ 135.624398][ T8512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.646885][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.654697][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.665698][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.673990][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.684019][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.693466][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.703102][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.714628][ T9621] Bluetooth: hci5: command 0x040f tx timeout [ 135.717794][ T8529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.737490][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.759546][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 135.785485][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.813776][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.827575][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.842835][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.850941][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.865245][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.874174][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.882994][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.933459][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 135.951293][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.988305][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.000764][ T8514] device veth1_vlan entered promiscuous mode [ 136.049851][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.062904][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.086066][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.110679][ T8510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.122626][ T8510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.140774][ T8510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.152768][ T8510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.213168][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.220843][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.248693][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.277875][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.281700][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.338089][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.352628][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.366132][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.373653][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.388126][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.400110][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.452442][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.470254][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.505149][ T8516] device veth0_vlan entered promiscuous mode [ 136.513607][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.523083][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.536783][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.545550][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.554346][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.563557][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.572554][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.586418][ T8514] device veth0_macvtap entered promiscuous mode [ 136.594613][ T3123] Bluetooth: hci0: command 0x0419 tx timeout [ 136.639827][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.649333][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.681374][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.705133][ T8514] device veth1_macvtap entered promiscuous mode [ 136.717592][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.745454][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.753641][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.767624][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.778406][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.789286][ T8516] device veth1_vlan entered promiscuous mode [ 136.825433][ T3123] Bluetooth: hci1: command 0x0419 tx timeout [ 136.846284][ T8512] device veth0_vlan entered promiscuous mode [ 136.859622][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 07:20:28 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockname$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, 0x8) [ 136.874564][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.897005][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.907034][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.956810][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 136.989533][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.009241][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.024661][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.047465][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.063908][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.065408][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 137.075563][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.090945][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 137.101865][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.114310][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.135782][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.144078][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.161916][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.176180][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.184972][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.207176][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.217438][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.236323][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.244347][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 07:20:29 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockname$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2}, 0x8) [ 137.262744][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.279554][ T8512] device veth1_vlan entered promiscuous mode [ 137.296140][ T5] Bluetooth: hci3: command 0x0419 tx timeout [ 137.301278][ T8514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.320551][ T8514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.333326][ T8514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.345703][ T8514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.374844][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.396905][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.460166][ T8529] device veth0_vlan entered promiscuous mode [ 137.484499][ T8516] device veth0_macvtap entered promiscuous mode [ 137.523662][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.536057][ T9837] Bluetooth: hci4: command 0x0419 tx timeout [ 137.537091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.567074][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.631088][ T8516] device veth1_macvtap entered promiscuous mode [ 137.670676][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.680132][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.699974][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.718776][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 07:20:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000380)={0x0, 0x4, @start={0x0, 0x0, "85af715e663b843e57f9ace731a2936c640ed6d29b6699945d37309ef28c9a4f9b31b48742378034b307dbd3bb5b592ea9e3c2483f7c61d93e02b5a4ab242c405fe02df4f5c134a2244425fbacb3fd21fdcf06fbb211ef512180edd818fa9f596a7ee56f3f160080a31832bfc5868c26848622151edad4836f0fee0d4e0eb6183fec758771fe5c21d269cbd46bb2d528a566b04a36e11c42517afc5042e0eb190d92e2a1c99fb80c4b72f8cc4f4def9f759fa3bd32773ea27cdd90cf941a5a63b14c85f9dc6ec5772c8c2421a217030be699af0c37f21145457fe4f3945797c6c8f8e5484b439c0a5cd96bb6f2fce26435d61d0d7cb2dacfc8f3a3cb8d8dd79daccfe0063b95df33b288658c967f75e2ecc6961da09706512fe05dbfc5ed2b1a462560f8bb6f94fd6cd33ddf9578fccd3e3486304b8cd10af5efdf50fad126ef7f9f051315e17edfdf85a742cd7f327c06eeba7d9bd3073363be80c0e3196df27591960403bd5f171a539745297df17f7751768fe0894c9293f432ba208ff297324c14492bdbedfb33d767ebe601dcd677e72b33d287df2279ec768c64f6e179030aeb2a81c86b7a4e4619774e721370b7d17b7d890b70d98f0a4a5607f62f48795d95e18eb6f0b058683460a863acc5625c2eac805a1189d5aaed9810bb78d922a3e95c05e8cb9d913cfe2765747a302500082dbe4e3f720a0aeaef4de1a93f9e2d3df0723ad5ef629226bc34243b4386ec00dbd7ca8a19b660014f7d475f4422b9fea2c23d0695825810f66ec38365284ab7ca965a36efcd56d0ccead229e3ad8b99ede1da384764aa5de9caef8c79114077b686a287e5058983298e8632b82c784c21b91f125f2d0fa5b1627785d1014c64326b9c51bd4f4af18ad1c3cc8db02bd9b8c760bd00996fc7ed1679be9c7af59454c58cb42bfee97b120f12423cb6a4dc20f5072904679ee822406117df490a069e3c71198dfa3c1f3171eecc7eee9d41ba948a8c13f2c2ca0fdc931cb3cf9c72b3bb633960bf4775826f5e7cecb1d8e49faadd7be3f3a07e584ae6e41d40d2ed1f3e212b1c178d8c4108518e87c308a1d1cc765a8ae402d7393c3d801fde41eb6f67b0dd51cdf262bad68e87ec8f0be6dd499c42b6a5db82a466805345ddd2c63594d4834b15674ba44d068a4b5e0e92020d326493c8390cc3c8cc375fbacb9815a0bca9003a0876eb76a18d3848f247b34c66d63a6d6b1619a803691f7fc295edb8bf71423f8ace6b9f8e92cbf6614420a2ff9abe908c2a8703ce910ac1375b2545996bb3f079bfc2bf3c693d3c8009a935436c93b0a52b4992428f492a712277f4fc3b8cc2e75ecb3cae548d71e00f095b9b8933e0928248ae636e44d0642d2143e11c1f07247dea9fcf2b4fffe4e59e8fa95e6d3726335b844b35f4d3dd0cb7268a00f5cf692de24f2c60e728", "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"}, [0x7, 0xffffffff, 0x7f, 0x8000, 0x4, 0x4, 0x81, 0xa0d0, 0x400, 0x7f, 0x4, 0x8, 0xffffffffffffffff, 0xffffffff9f18be09, 0xca, 0x5, 0xcb96, 0x14d8, 0x5, 0x4, 0xffffffff, 0x2, 0x1f9, 0x10000, 0x9, 0x4, 0x2, 0x51, 0x1, 0x0, 0x6, 0x6, 0x2, 0x20, 0x6b8, 0xffffffffffffff80, 0x3, 0xf3, 0x76ef36f3, 0xfff, 0x3, 0xffffffffffffff01, 0x10001, 0x6, 0x5792, 0x685b, 0x7f, 0x8000, 0x200, 0xffffffffffffff7f, 0x7fff, 0x0, 0x8, 0x4, 0x1, 0x6c, 0x3, 0x400, 0x78e, 0x4, 0x1, 0x9, 0xffff, 0x200]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000dc0)={r1, "ff6c18c6f071ca117c0a2e5ac69c6ce1"}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)) [ 137.739728][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.776124][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 137.784128][ T8529] device veth1_vlan entered promiscuous mode [ 137.813538][ T8512] device veth0_macvtap entered promiscuous mode [ 137.852154][ T8512] device veth1_macvtap entered promiscuous mode [ 137.938797][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 137.966845][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.981447][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.001516][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.013679][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.035344][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.048048][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.061562][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.073999][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.084409][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.098870][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.109323][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.120311][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.132031][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.150776][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.160238][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.169656][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.180176][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.189971][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.200452][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.209839][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.219233][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.258379][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.275215][ T8516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.295338][ T8516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.304331][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.313232][ T8516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.324208][ T8516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 07:20:30 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a177511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 138.354000][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.370963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.381222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.421523][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.454745][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:20:30 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419000100000001a9cabc79cf20baba46be5bd28b020a1836f4", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)="390000001300094700bb65e1c3e4ffff060000000200003f0000000000000000190021", 0xa}, {&(0x7f0000000100)="6c91163d36d828b8df2c013ca964d0cbdf02058f3a328b6ba595c67528b91d"}, {&(0x7f00000000c0)="8944b4c7faf1d038ca267ee0f2223c30969c29f710f3e617be341944c4d2a27802f2ac2f5cc4036ffb"}, {&(0x7f0000000200)="9e2ec9263cf6b4fd00ff050fe0a05963d5113ef83d526bc06c53f358b4652f199bac6aeceaf63dd413b0d52b34cc9cce342bd83db3652bfeeeeb4a65e4296d99e06cc0360bd3d8805f7005261b9e91c930da0685f34ed1e9c450d7fe6dd8d294b3490b4af8cb9d9e8b30acb03444aa70f99efb0e09d745fcab90e1d119e22397bc3f7597fb264125a1907fbde8c69907aeb1667824e083d2ca8b141e6a1adb49ef41d3c64f3c93576115e1e8b142eb3369232079c5617ed156f2b1874d886789184849f83574eefe811b850b52c60f913a3637a0bd0f1ad8854188fa8cdbac95e338a5435cd97e51afdc"}, {&(0x7f0000000300)="ebf4c6d47da6410e28f5fc92b60d45dfbed13f4cbbd5a177d1ed47039bb516b32a3a6ef7de05b688410ac87e884f67f04994edb3115a9e71df3d3c971672320cee5e00295446f64d062968a65dd2862c44c24d9e5a34cd19200e57e4b8bce1a4179b04c245689e12474417fa3b0faaf90fb2e54a0cff57f90f5e8b0facda7ed92fcf5ec10bb5617988c7a0c5c3e89e962f904c5997a94611576f7966c19c07ca2c731e17f9d39c601338bbac3543ca3759540dbdccb7c083f5ee4c06e690684c39cd787615869578fccac247cf0bb723d789a7eccf123bbe6b9c60"}, {&(0x7f0000000100)}, {&(0x7f0000000400)="0b08406f5ed30675784dcac70950a2020f2e07965206f1375a63433a06ad6d0bc07684312954d4124782163a063b6528284ea167c3ba05d9632a7a8cc60d735546a9385320a7d708991bbd1a07472df06b13c31f9716735dd247cc6974310fe0a27909b43be3e326a7382e674f3d588a"}], 0x1) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0xb8, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000010) [ 138.511873][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.546460][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.578911][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 138.599455][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.610863][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 07:20:30 executing program 1: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000700)=""/118, 0x76}], 0x4, &(0x7f00000007c0)=""/181, 0xb5}, 0x13140) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000008c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x98060400) unshare(0x6a020400) [ 138.645514][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.661847][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.681533][ T8529] device veth0_macvtap entered promiscuous mode [ 138.706176][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.714237][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.732324][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.748260][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.758357][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.767777][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.791376][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.805360][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.825733][ T9937] IPVS: ftp: loaded support on port[0] = 21 [ 138.831167][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.843009][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.857903][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.871032][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.884966][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 138.895970][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.909562][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.921530][ T8529] device veth1_macvtap entered promiscuous mode [ 138.937225][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.947550][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 07:20:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) [ 138.956340][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.998803][ T8512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.020328][ T8512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.051668][ T8512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.071775][ T8512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 07:20:31 executing program 3: socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007270600fd5721540001a3810000", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b"], 0x50}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) [ 139.175000][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.214665][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.240025][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.261901][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.292718][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.325291][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.335131][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.349420][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.359931][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 139.372173][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.397433][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.450721][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.476473][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.521504][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.534033][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.565304][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.585277][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.595126][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.614317][ T9972] IPVS: ftp: loaded support on port[0] = 21 [ 139.636069][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.655315][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.673741][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.696497][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 139.719553][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.741251][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.801810][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.812411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.829936][ T8529] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.840351][ T8529] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.850658][ T8529] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.860421][ T8529] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.890994][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.908358][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.957212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.995151][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.024575][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.083202][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.124735][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.146207][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.188452][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.234539][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.273022][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.281237][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.305339][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.338905][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.351195][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.377518][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.393653][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.421310][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:20:32 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'batadv0\x00', {'netpci0\x00'}, 0x1e76}) getsockopt$rose(r0, 0x104, 0x5, 0x0, &(0x7f0000000b00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='urandom_read\x00'}, 0x10) 07:20:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077000400009a6788a355fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65517b0e1a38d8665522be18b1caa8ab769e6cb12be08bfbf20d10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae661e173a649c1cfd6587d452d64e7cc957d77578f4c35249138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3000000471fbbbdfa932adf2dffbedc2a5455fddf2d02f5ee9192d2cf4ebef09fae8899d23f53df8dff1dc592b124d06d6ca9221063f7d1b34bea3aeeecc5e85f79c61f6410e6315f6d276bd165beb093f139dc92ec9f894647f1479cf00cf480512f014ab6d9ca265bbf0eb0fe662a130fb8f9fbee39ce9c8d71890a0129a94cba3fade621b373d97de65ebe3264845b331621cfc4ec8325"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000740)=0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000780)={0x3, @null, r5}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fe104b67ec000100009cfb9f", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000007372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) 07:20:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047b9, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/155, 0x9b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'ip6erspan0\x00'}) shutdown(r0, 0x1) 07:20:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7ff, 0x7, [0x1, 0xff, 0x1, 0x101, 0xffff, 0xfffd, 0x8001]}, 0x16) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400fffe, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) sendfile(r3, r0, 0x0, 0x80000001) [ 140.712988][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.768154][T10093] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.804094][ T34] audit: type=1804 audit(1604733632.851:2): pid=10094 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir067863076/syzkaller.tdO4wA/1/memory.events" dev="sda1" ino=15777 res=1 errno=0 07:20:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 140.881975][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:20:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047b9, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/155, 0x9b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'ip6erspan0\x00'}) shutdown(r0, 0x1) [ 140.946048][ T34] audit: type=1800 audit(1604733632.851:3): pid=10094 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=15777 res=0 errno=0 07:20:33 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x78}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) [ 141.060254][ T34] audit: type=1804 audit(1604733632.871:4): pid=10094 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir067863076/syzkaller.tdO4wA/1/memory.events" dev="sda1" ino=15777 res=1 errno=0 07:20:33 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x20}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000000)=0x800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x838, 0x2000}}, 0x20}}, 0x0) 07:20:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0xffffffffffffffea, 0x0, 0x100, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1b}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xffffffffffffffa4, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES64], 0x24}}, 0x240401c5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x10000000d) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000121}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="08002bbd7000ffdbdf250400000040ef65f9ec96e26c92b48532e27048bc19af15ee8bbaf8b167a6530ee4283f7c"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) r8 = socket$inet6(0xa, 0xa, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001500)='veno\x00', 0x5) [ 141.500808][ T34] audit: type=1804 audit(1604733633.551:5): pid=10112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir029776015/syzkaller.CmtPov/4/cgroup.controllers" dev="sda1" ino=15778 res=1 errno=0 [ 141.649183][ T34] audit: type=1800 audit(1604733633.641:6): pid=10116 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=15777 res=0 errno=0 [ 141.746376][ T34] audit: type=1804 audit(1604733633.651:7): pid=10116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir067863076/syzkaller.tdO4wA/1/memory.events" dev="sda1" ino=15777 res=1 errno=0 07:20:35 executing program 1: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000700)=""/118, 0x76}], 0x4, &(0x7f00000007c0)=""/181, 0xb5}, 0x13140) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000008c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x98060400) unshare(0x6a020400) 07:20:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) write$binfmt_script(r5, &(0x7f0000001280)=ANY=[@ANYBLOB="d4829dbef4990fb33e6b45618ecdbef5b47d66c5aa62ad68f7b8f3384eecc92858e65c4e014832f12cdd2106e59cc2e9cab1002d54822b81ebe57528e76b076567dd6f2818f286e35dcd301330cecf4e9f5becc8128173844b4a2244dbbce96525a69630e807d624071e4ff3f4fa58032cc62e40ee0a54f1f0daa84b1551598752b719352228db5f9cd1043fe28959ff64d32acdaae5deefb53490e94e33372a170edfc12b6822a1e8bf5fa9f6a199d3838a3a1795284129f51e372858525dbce034e368d64ea41c900ee1a7fa2db77f67adae13cc062b1fd051b124385461367e5962fddf66d4d7609728", @ANYRES64=r6], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r8, 0x84, 0xe, &(0x7f00000000c0)=""/4093, &(0x7f0000001140)=0xffd) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r7, 0x0, 0x100000002) 07:20:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005a00)={0x0, 0x0, &(0x7f00000059c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000200010000000000000000000000000a380000000c0a01020000000000000000000000020900020073797a30000000000900020073797a32000000000900010073797a3100000000140000001100010000000000000000000000000a75e2c7da85f6e8f559d0227f2c9abf56e393ac8d90332853df1e7c49528f983789"], 0x60}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000600), 0x4) r3 = socket$inet6(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0xfffffffe, 0x2]}, 0x5c) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000280)={0x3, [0x2, 0x539, 0x7]}, 0xa) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860073ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x3, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'macvtap0\x00'}) 07:20:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x114163b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000a939b9cbd623f5e669af066d00", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0x2000006, 0x11, r3, 0xc2c3a000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={'xfrm0\x00', {0x2, 0x0, @local}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = socket$inet(0x2, 0x80000, 0x7) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="18020000", @ANYRES16=r6, @ANYBLOB="090300000000e500000003"], 0x3}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x29, 0x5, 0x6, 0x401, 0x2a, @local, @private0, 0x1, 0x1, 0x8, 0xf59a}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000400)={0x3, 'vcan0\x00', {0x5}, 0x4}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', r8, 0x80, 0x1, 0x0, 0x6, {{0x26, 0x4, 0x2, 0x7, 0x98, 0x68, 0x0, 0xa4, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x1f, 0x2a, [@local, @multicast1, @multicast2, @multicast2, @loopback, @remote, @empty]}, @rr={0x7, 0xb, 0xa1, [@remote, @private=0xa010100]}, @lsrr={0x83, 0x17, 0xbf, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x17, 0xd4, [@broadcast, @loopback, @private=0xa010102, @multicast1, @multicast2]}, @generic={0x82, 0x3, "03"}, @generic={0x8f, 0xf, "83fb3c715733ec45835dc4eeed"}, @ssrr={0x89, 0x17, 0xf0, [@multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendfile(r5, r1, 0x0, 0x1ff08) 07:20:35 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x1}, 0x1, 0x0, 0x0, 0x4040804}, 0x44) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000200)=0xfb5, &(0x7f0000000100)=0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf2a05c5a179d5402}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcef8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x843bfeffc5969a6e) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 143.908071][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 143.917745][T10124] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 143.924268][T10124] CPU: 1 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 143.933040][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.943109][T10124] Call Trace: [ 143.946419][T10124] dump_stack+0x107/0x163 [ 143.950775][T10124] check_preemption_disabled+0x123/0x130 [ 143.956441][T10124] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 143.962178][T10124] trace_hardirqs_on+0x5b/0x1c0 [ 143.967047][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 143.972374][T10124] do_user_addr_fault+0x7d7/0xb40 [ 143.977422][T10124] exc_page_fault+0x9e/0x180 [ 143.982033][T10124] ? asm_exc_page_fault+0x8/0x30 [ 143.986986][T10124] asm_exc_page_fault+0x1e/0x30 [ 143.991852][T10124] RIP: 0033:0x445101 [ 143.995757][T10124] Code: 8d 15 a3 ce 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 144.014846][T10139] IPVS: ftp: loaded support on port[0] = 21 [ 144.015628][T10124] RSP: 002b:00007fff9fe5a688 EFLAGS: 00010202 [ 144.015644][T10124] RAX: 0000000020000080 RBX: 0000000001190dc8 RCX: 0000000000000063 [ 144.015653][T10124] RDX: 0000000000000013 RSI: 0000000001190de8 RDI: 0000000020000080 [ 144.015662][T10124] RBP: 0000000001190dd0 R08: 0000000000000000 R09: 0000000000000000 [ 144.015672][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 144.015681][T10124] R13: 000000000002322e R14: 00000000000003e8 R15: 000000000118bfd4 [ 144.017023][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 144.077653][T10124] caller is lockdep_hardirqs_on+0x38/0x110 [ 144.083475][T10124] CPU: 1 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 144.092241][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.102303][T10124] Call Trace: [ 144.105616][T10124] dump_stack+0x107/0x163 [ 144.109987][T10124] check_preemption_disabled+0x123/0x130 [ 144.115631][T10124] ? __bad_area_nosemaphore+0xc6/0x400 [ 144.121111][T10124] lockdep_hardirqs_on+0x38/0x110 [ 144.126148][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 144.131451][T10124] do_user_addr_fault+0x7d7/0xb40 [ 144.136587][T10124] exc_page_fault+0x9e/0x180 [ 144.141192][T10124] ? asm_exc_page_fault+0x8/0x30 [ 144.146139][T10124] asm_exc_page_fault+0x1e/0x30 [ 144.150992][T10124] RIP: 0033:0x445101 [ 144.154902][T10124] Code: 8d 15 a3 ce 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 144.174603][T10124] RSP: 002b:00007fff9fe5a688 EFLAGS: 00010202 [ 144.180684][T10124] RAX: 0000000020000080 RBX: 0000000001190dc8 RCX: 0000000000000063 [ 144.188663][T10124] RDX: 0000000000000013 RSI: 0000000001190de8 RDI: 0000000020000080 [ 144.196644][T10124] RBP: 0000000001190dd0 R08: 0000000000000000 R09: 0000000000000000 [ 144.204622][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 144.212609][T10124] R13: 000000000002322e R14: 00000000000003e8 R15: 000000000118bfd4 07:20:36 executing program 4: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000040)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xf00}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) 07:20:36 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000000)=0x80, 0x4) r1 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000006c0)=@tipc=@name={0x10, 0x2, 0x0, {{0x41}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="118402093de902233e496d5671dc71ff04291b2c1501655802bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc07a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee378758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcbb85c95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0xf49}, {&(0x7f0000000840)='\x00', 0xfd14}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) 07:20:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005a00)={0x0, 0x0, &(0x7f00000059c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000200010000000000000000000000000a380000000c0a01020000000000000000000000020900020073797a30000000000900020073797a32000000000900010073797a3100000000140000001100010000000000000000000000000a75e2c7da85f6e8f559d0227f2c9abf56e393ac8d90332853df1e7c49528f983789"], 0x60}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000600), 0x4) r3 = socket$inet6(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0xfffffffe, 0x2]}, 0x5c) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000280)={0x3, [0x2, 0x539, 0x7]}, 0xa) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860073ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x3, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'macvtap0\x00'}) 07:20:36 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40)='nl80211\x00') sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000002c00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'vlan0\x00', 0x1f, 0x80}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5450, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000001240)=ANY=[@ANYBLOB="64030000", @ANYRES16=0x0, @ANYBLOB="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"/912], 0x364}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000001200)={'ip_vti0\x00', 0x3}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x64b2726f, 0xffffffff, 0xfffff800}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000004c00000008000300", @ANYRES32=r6, @ANYBLOB="ff52496d0db51bb0f9667dd16a13f00eb9bdf1e083da6a65057520a9f2c95269e25206d4470dba1cfa174483ffdd29790a7bc808aaf1fd5fa1414dbb3100"/72], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800)='nl80211\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001140)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000000840)={0x8b4, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x6c}}}}, [@NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3de, 0x8001, 0x2, 0x7, 0x200, 0x20, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x9, 0x5, 0x1000, 0x7, 0x1ff, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x100, 0x1090, 0x5, 0xcbb, 0x5c0a, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x9, 0x8001, 0x20, 0x7ff, 0x3, 0xff]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x12, 0x30, 0x6, 0x12, 0x60, 0x6c, 0x4, 0x30, 0x60, 0x16, 0x16, 0x3, 0x4, 0x0, 0x48, 0x3, 0x12, 0xc, 0x4b, 0x1, 0x30, 0x1, 0x3, 0x2, 0x1, 0x6c, 0x12, 0x15, 0x24]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x0, 0x401, 0x200, 0x0, 0xf7b8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x48, 0x36, 0x48, 0x6c, 0x5, 0x48, 0x36, 0x36, 0xc, 0x6, 0x2, 0x60, 0x2, 0x1b, 0x12, 0x16, 0xb, 0x48, 0x9, 0x6, 0x1b, 0x24, 0x48, 0x24, 0x48, 0x48, 0xc, 0x24, 0x9, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x17f2e67f9ba6d76c, 0x60, 0x12, 0x18, 0x21, 0xb, 0x3, 0xc, 0x24, 0x6c, 0x1, 0x6, 0x36, 0x0, 0x1b, 0x3, 0x5, 0x5, 0x18, 0x60]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x48, 0x18, 0xb, 0x6, 0x30, 0x18, 0x24, 0x3, 0x12, 0xb, 0x2, 0x4, 0x36, 0x30, 0x30, 0x6, 0x48, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0xed, 0x68c4, 0x1, 0x6, 0x773d, 0x9, 0x6]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4130, 0x8001, 0x0, 0x2, 0x5, 0x9, 0x40, 0x6]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x6, 0xa}, {0x5}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x7, 0x3}, {0x5, 0x8}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x5}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0xa}, {0x5, 0x5}, {0x1, 0x2}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x6, 0x3ff, 0x3ff, 0xf001, 0x3232, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x6}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x8}, {0x3, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x2}, {0x4, 0x9}, {0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x5}, {0x4, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x7, 0x3}, {0x4, 0x8}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x264, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x7}, {0x2, 0x7}, {0x4, 0xa}, {0x7}, {0x2}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x9}, {0x5, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x1}, {0x3, 0x5}, {0x2}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0x9}, {0x3}, {0x4}, {0x5, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x7, 0xa}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x6, 0xf801, 0x0, 0x8001, 0xeff, 0xa53d, 0xdb90]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x9, 0xd3b, 0xa2c, 0x400, 0x6, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x18, 0x2, 0x30, 0x6c, 0x1, 0x5, 0x36, 0x12, 0x3, 0x1b, 0x12, 0x48, 0x6c, 0x12, 0x3, 0x4, 0x0, 0x1b, 0x24, 0x1b, 0xb, 0x30, 0x48, 0xc, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x800, 0x460, 0x0, 0x42, 0x800, 0x1000, 0x1]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x100, 0x8, 0x2, 0x3, 0x7fff, 0xe12]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x8}, {0x5, 0x2}, {0x7, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x2}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x60, 0x41, 0xc, 0xff0ebf032f8a1aa1, 0x9, 0x24, 0x12, 0xb, 0x1, 0xb, 0x30, 0x12, 0x36, 0x9]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x7, 0x5, 0xadee, 0x2, 0x2, 0x9, 0x6]}}]}, @NL80211_BAND_5GHZ={0x138, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x4}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x3}, {}, {0x5, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0x4}, {0x7}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x2}, {0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x3, 0x8}, {}, {0x5, 0x4}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x7, 0x3}, {0x2, 0x7}, {0x6, 0x2}, {0x7, 0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0xa}, {0x4, 0x7}, {0x5, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x1}, {0x3, 0x4}, {0x3, 0x6}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x2}, {0x4, 0x4}, {0x3}, {0x4, 0x5}, {0x1}, {0x0, 0x9}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {}, {0x5, 0x7}, {0x4, 0x2}, {0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0x9}, {0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x5, 0x6}, {0x3}, {0x3, 0x6}, {0x2, 0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x12, 0xc, 0x30, 0x1, 0x0, 0x3, 0x1, 0x70, 0x5, 0x22, 0x4, 0x16, 0x30, 0x24, 0x1, 0x2, 0x12, 0x48, 0x9, 0x2, 0xb, 0x48, 0x6c, 0x16, 0x4, 0x18, 0x60, 0x12]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0xb, 0x2, 0x5, 0x4, 0xb, 0xc, 0x1, 0x12, 0x2, 0x4, 0x4, 0x14, 0x2, 0x16, 0x18, 0x4, 0x1b, 0x1b]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5}, {0x4}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x1}, {}, {0x3, 0x3}, {0x7, 0x6}, {0x7}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x3}, {0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0x9}, {0x4, 0x6}, {}, {0x3, 0x8}, {0x0, 0x8}, {0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x3, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x5}, {0x6, 0x1}, {0x6, 0x5}, {0x1, 0xc}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x6, 0x1, 0x705e, 0x1, 0x7fff, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x9}, {0x6, 0xa}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x454, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x44, 0x8, 0x99c, 0xc3c, 0x7e16]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x18, 0xc, 0x18, 0x1, 0x5, 0x30, 0x30, 0x16, 0x36, 0xb, 0x67, 0x2, 0x4, 0x48, 0x0, 0x24, 0x30, 0x6, 0xc, 0x6, 0x0, 0x18, 0x4a, 0x48, 0x24, 0x1b, 0x4, 0xb, 0x25]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8, 0x8, 0x200, 0xc4, 0xff, 0x7ff, 0x1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x3, 0x1b, 0x24, 0xb, 0x2, 0x60, 0x13, 0x6, 0x6, 0x6c, 0x4, 0x4, 0x18, 0x12, 0x2, 0x34, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x5, 0xff, 0x8, 0x1, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0af, 0x2, 0xfeff, 0x1000, 0x2, 0xb3c, 0xf9ad, 0x5]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x5, 0x3}, {0x7, 0x9}, {0x5, 0x1}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xff, 0xe56e, 0x1f, 0x6, 0xffff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x10, 0x9, 0x2, 0x1, 0x16, 0x9, 0x1b, 0x16, 0x30, 0x36, 0x1b, 0x18]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x3}, {0x2, 0x1f}, {0x3, 0x2}, {0x7}, {0x4, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {}, {0x4, 0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2}, {0x4, 0x7}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x6}, {0x3}, {0x4}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0x8}, {0x6, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x1}, {0x1}, {0x6, 0x2}, {0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x4}, {0x7, 0x1}, {0x6, 0x3}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x4}, {0x6}, {0x6, 0x2}, {0x4, 0x5}, {0x3}, {0x6, 0x7}, {0x4, 0x3}, {0x1, 0x3}, {0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x569, 0xbf33, 0x6, 0x7f, 0x1000, 0x8, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x1b, 0x0, 0x9]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb04, 0x2, 0x3f, 0x4, 0x6, 0x28f, 0xfffb, 0x7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x6}, {0x5, 0x9}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x9}, {0x4, 0x8}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x7}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0xa}, {0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0xa}, {0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x14}, {0x3, 0x3}, {0x4, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x7}, {0x5, 0x7}, {0x2}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x3}, {0x1}, {0x4, 0xa}, {}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x22, 0x2, 0x1]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x9, 0x16, 0x36, 0xb, 0x6c, 0x36, 0xb, 0x9, 0x60, 0x24]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x6, 0x48]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x12, 0x24, 0x1b, 0x0, 0x2, 0x3, 0x9, 0x0, 0x18, 0x5, 0x6c, 0xb, 0x1b, 0x1, 0x16, 0xb, 0x16, 0x24, 0x24, 0x4, 0x60, 0x1b, 0x6, 0x4, 0x6, 0x0, 0x1b, 0x36, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x0, 0x9, 0x4, 0x5, 0x18, 0x60]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x16, 0x5, 0x0, 0x48, 0x12, 0xc, 0xb, 0x18, 0x30, 0x60, 0x6, 0x60, 0x30, 0xc, 0x48, 0x60, 0x0, 0x18, 0x4, 0x3, 0x60, 0x36, 0x1, 0xc, 0x48, 0xb, 0x4, 0x12, 0x9, 0x12, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6c, 0x12, 0x4b, 0x12, 0xc, 0x6c, 0x9, 0x51, 0x1, 0x60]}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x9}, {0x0, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x6}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x9}, {0x2}, {0x2, 0x7}, {0x1, 0x7}, {0x5}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0x5}, {0x4, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x1}, {}, {0x0, 0x9}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x2, 0x3}, {0x0, 0x3}, {0x4}, {0x2, 0x6}, {0x7}, {0x4, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x9}, {0x0, 0xa}, {0x2, 0x2}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x6, 0x3}, {0x4, 0x5}, {0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x6}, {0x4, 0x5}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x3}, {}, {0x6, 0x7}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x7}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0x1}, {0x7, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x3, 0x7}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x9}, {0x3, 0x1}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x4}, {0x6, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x5}, {0x1}, {0x1, 0x4}, {}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x3, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x2, 0x8}, {0x4, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0xc392, 0xb9, 0x80, 0x1f, 0xf5aa]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x6, 0x2, 0x12, 0x0, 0x36, 0xc, 0x0, 0x4, 0x16, 0x36, 0xb, 0xc, 0x4, 0x0, 0x2, 0x4, 0x4, 0x6, 0x6, 0x36, 0x6c, 0x1, 0x48, 0x1b, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x15, 0x36, 0x66, 0x12]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5f48, 0x3ff, 0x6, 0x0, 0x101, 0xfdf2, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x1}, {}, {0x3, 0x6}, {0x4, 0x9}, {0x4, 0x7}, {0x4}, {0x7, 0x8}, {0x5, 0x5}, {0x7}, {0x6, 0x1}, {0x3}, {0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x7}, {0x1, 0x6}, {}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x5, 0x4, 0x0, 0xcd06, 0xffff, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x9}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x4, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x4}, {0x6, 0xa}, {0x6}, {0x1, 0x5}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x1}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x3}]}]}]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x48008044}, 0x24008000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) [ 144.851162][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 144.869633][T10180] team0: Device vlan2 is already an upper device of the team interface 07:20:37 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) close(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x8, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)={'nat\x00'}, &(0x7f00000005c0)=0x54) socket$inet(0x2, 0x2, 0x800002) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x20000004, 0x32fe3cf0}, 0x14) shutdown(r2, 0x1) [ 145.030430][T10180] team0: Device vlan2 is already an upper device of the team interface 07:20:37 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) close(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x8, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)={'nat\x00'}, &(0x7f00000005c0)=0x54) socket$inet(0x2, 0x2, 0x800002) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x20000004, 0x32fe3cf0}, 0x14) shutdown(r2, 0x1) 07:20:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x0) 07:20:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1, 0x2, 0x104, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x28}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) [ 145.727745][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 145.737264][T10124] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 145.743827][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 145.752587][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.762644][T10124] Call Trace: [ 145.765948][T10124] dump_stack+0x107/0x163 [ 145.770296][T10124] check_preemption_disabled+0x123/0x130 [ 145.776127][T10124] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 145.781944][T10124] trace_hardirqs_on+0x5b/0x1c0 [ 145.786811][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 145.792111][T10124] do_user_addr_fault+0x7d7/0xb40 [ 145.797153][T10124] exc_page_fault+0x9e/0x180 [ 145.801746][T10124] ? asm_exc_page_fault+0x8/0x30 [ 145.806689][T10124] asm_exc_page_fault+0x1e/0x30 [ 145.811538][T10124] RIP: 0033:0x400580 [ 145.815437][T10124] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 d5 68 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 145.835044][T10124] RSP: 002b:00007fff9fe5a650 EFLAGS: 00010206 [ 145.841126][T10124] RAX: 000000000000000a RBX: 0000000001190ed8 RCX: 0000000020000000 [ 145.849110][T10124] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 145.857090][T10124] RBP: 0000000001190ee0 R08: 0000000000000000 R09: 0000000000000000 [ 145.865071][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 145.873139][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 [ 145.882005][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 145.891743][T10124] caller is lockdep_hardirqs_on+0x38/0x110 [ 145.897761][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 145.906532][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.916594][T10124] Call Trace: [ 145.919903][T10124] dump_stack+0x107/0x163 [ 145.924256][T10124] check_preemption_disabled+0x123/0x130 [ 145.929903][T10124] ? __bad_area_nosemaphore+0xc6/0x400 [ 145.935385][T10124] lockdep_hardirqs_on+0x38/0x110 [ 145.940428][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 145.945742][T10124] do_user_addr_fault+0x7d7/0xb40 [ 145.950801][T10124] exc_page_fault+0x9e/0x180 [ 145.955403][T10124] ? asm_exc_page_fault+0x8/0x30 [ 145.960358][T10124] asm_exc_page_fault+0x1e/0x30 [ 145.965212][T10124] RIP: 0033:0x400580 [ 145.969112][T10124] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 d5 68 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 145.988726][T10124] RSP: 002b:00007fff9fe5a650 EFLAGS: 00010206 [ 145.994813][T10124] RAX: 000000000000000a RBX: 0000000001190ed8 RCX: 0000000020000000 [ 146.002798][T10124] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 146.010785][T10124] RBP: 0000000001190ee0 R08: 0000000000000000 R09: 0000000000000000 [ 146.018770][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 146.026756][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 [ 146.038481][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 146.047945][T10124] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 146.054468][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 146.063350][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.073418][T10124] Call Trace: [ 146.076728][T10124] dump_stack+0x107/0x163 [ 146.081080][T10124] check_preemption_disabled+0x123/0x130 [ 146.086740][T10124] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 146.092485][T10124] trace_hardirqs_on+0x5b/0x1c0 [ 146.097353][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 146.102647][T10124] do_user_addr_fault+0x7d7/0xb40 [ 146.107699][T10124] exc_page_fault+0x9e/0x180 [ 146.112295][T10124] ? asm_exc_page_fault+0x8/0x30 [ 146.117234][T10124] asm_exc_page_fault+0x1e/0x30 [ 146.122092][T10124] RIP: 0033:0x400580 [ 146.125992][T10124] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 d5 68 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 146.145598][T10124] RSP: 002b:00007fff9fe5a650 EFLAGS: 00010206 [ 146.151673][T10124] RAX: 000000000000204e RBX: 0000000001190f00 RCX: 0000000020000002 [ 146.159649][T10124] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 000000000000204e [ 146.167627][T10124] RBP: 0000000001190f08 R08: 0000000000000000 R09: 0000000000000000 [ 146.175611][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 146.183593][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 [ 146.195803][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 146.206388][T10124] caller is lockdep_hardirqs_on+0x38/0x110 [ 146.212224][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 146.220983][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.231039][T10124] Call Trace: [ 146.234340][T10124] dump_stack+0x107/0x163 [ 146.238681][T10124] check_preemption_disabled+0x123/0x130 [ 146.244319][T10124] ? __bad_area_nosemaphore+0xc6/0x400 [ 146.249785][T10124] lockdep_hardirqs_on+0x38/0x110 [ 146.254834][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 146.260131][T10124] do_user_addr_fault+0x7d7/0xb40 [ 146.265170][T10124] exc_page_fault+0x9e/0x180 [ 146.269769][T10124] ? asm_exc_page_fault+0x8/0x30 [ 146.274709][T10124] asm_exc_page_fault+0x1e/0x30 [ 146.279560][T10124] RIP: 0033:0x400580 [ 146.283457][T10124] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 d5 68 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 146.303073][T10124] RSP: 002b:00007fff9fe5a650 EFLAGS: 00010206 [ 146.309151][T10124] RAX: 000000000000204e RBX: 0000000001190f00 RCX: 0000000020000002 [ 146.317131][T10124] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 000000000000204e [ 146.325105][T10124] RBP: 0000000001190f08 R08: 0000000000000000 R09: 0000000000000000 [ 146.333111][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 146.341085][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 [ 146.351842][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 146.361306][T10124] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 146.367914][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 146.376676][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.386734][T10124] Call Trace: [ 146.390038][T10124] dump_stack+0x107/0x163 [ 146.394378][T10124] check_preemption_disabled+0x123/0x130 [ 146.400019][T10124] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 146.405741][T10124] trace_hardirqs_on+0x5b/0x1c0 [ 146.410597][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 146.415892][T10124] do_user_addr_fault+0x7d7/0xb40 [ 146.420935][T10124] exc_page_fault+0x9e/0x180 [ 146.425534][T10124] ? asm_exc_page_fault+0x8/0x30 [ 146.430475][T10124] asm_exc_page_fault+0x1e/0x30 [ 146.435323][T10124] RIP: 0033:0x400604 [ 146.439225][T10124] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 51 68 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 146.458835][T10124] RSP: 002b:00007fff9fe5a650 EFLAGS: 00010206 [ 146.464913][T10124] RAX: 0000000000000000 RBX: 0000000001190f28 RCX: 0000000000000001 [ 146.472887][T10124] RDX: 0000000000000001 RSI: 0000000020000004 RDI: 0000000000000000 [ 146.480862][T10124] RBP: 0000000001190f30 R08: 0000000000000000 R09: 0000000000000000 [ 146.488831][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 146.496807][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 [ 146.505677][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 146.515066][T10124] caller is lockdep_hardirqs_on+0x38/0x110 [ 146.521279][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 146.530042][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.540093][T10124] Call Trace: [ 146.543395][T10124] dump_stack+0x107/0x163 [ 146.547732][T10124] check_preemption_disabled+0x123/0x130 [ 146.553365][T10124] ? __bad_area_nosemaphore+0xc6/0x400 [ 146.558826][T10124] lockdep_hardirqs_on+0x38/0x110 [ 146.563849][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 146.569140][T10124] do_user_addr_fault+0x7d7/0xb40 [ 146.574174][T10124] exc_page_fault+0x9e/0x180 [ 146.578807][T10124] ? asm_exc_page_fault+0x8/0x30 [ 146.583742][T10124] asm_exc_page_fault+0x1e/0x30 [ 146.588588][T10124] RIP: 0033:0x400604 [ 146.592486][T10124] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 51 68 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 146.612099][T10124] RSP: 002b:00007fff9fe5a650 EFLAGS: 00010206 [ 146.618185][T10124] RAX: 0000000000000000 RBX: 0000000001190f28 RCX: 0000000000000001 [ 146.626157][T10124] RDX: 0000000000000001 RSI: 0000000020000004 RDI: 0000000000000000 [ 146.634132][T10124] RBP: 0000000001190f30 R08: 0000000000000000 R09: 0000000000000000 [ 146.642106][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 146.650076][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 [ 146.748653][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 146.758245][T10124] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 146.764756][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 146.773513][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.783572][T10124] Call Trace: [ 146.786870][T10124] dump_stack+0x107/0x163 [ 146.791206][T10124] check_preemption_disabled+0x123/0x130 [ 146.796849][T10124] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 146.802587][T10124] trace_hardirqs_on+0x5b/0x1c0 [ 146.807443][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 146.812912][T10124] do_user_addr_fault+0x7d7/0xb40 [ 146.817950][T10124] exc_page_fault+0x9e/0x180 [ 146.822543][T10124] ? asm_exc_page_fault+0x8/0x30 [ 146.827741][T10124] asm_exc_page_fault+0x1e/0x30 [ 146.832598][T10124] RIP: 0033:0x445157 [ 146.836498][T10124] Code: 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 00 48 8b 0e 4c 8b 46 08 <48> 89 0f 4c 89 47 08 83 ea 10 48 8d 76 10 48 8d 7f 10 75 e5 f3 c3 [ 146.856281][T10124] RSP: 002b:00007fff9fe5a688 EFLAGS: 00010202 [ 146.862356][T10124] RAX: 0000000020000008 RBX: 0000000001190f50 RCX: 0000000000000000 [ 146.870330][T10124] RDX: 0000000000000010 RSI: 0000000001190f70 RDI: 0000000020000008 [ 146.878302][T10124] RBP: 0000000001190f58 R08: 0000000000000000 R09: 0000000001190f30 [ 146.886289][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 146.894263][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 [ 146.905461][T10124] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/10124 [ 146.914868][T10124] caller is lockdep_hardirqs_on+0x38/0x110 [ 146.921734][T10124] CPU: 0 PID: 10124 Comm: syz-executor.2 Not tainted 5.10.0-rc1-syzkaller #0 [ 146.930511][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.940744][T10124] Call Trace: [ 146.944054][T10124] dump_stack+0x107/0x163 [ 146.948400][T10124] check_preemption_disabled+0x123/0x130 [ 146.954039][T10124] ? __bad_area_nosemaphore+0xc6/0x400 [ 146.959503][T10124] lockdep_hardirqs_on+0x38/0x110 [ 146.964535][T10124] __bad_area_nosemaphore+0xc6/0x400 [ 146.969834][T10124] do_user_addr_fault+0x7d7/0xb40 [ 146.974871][T10124] exc_page_fault+0x9e/0x180 [ 146.979464][T10124] ? asm_exc_page_fault+0x8/0x30 [ 146.984402][T10124] asm_exc_page_fault+0x1e/0x30 [ 146.989251][T10124] RIP: 0033:0x445157 [ 146.993148][T10124] Code: 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 00 48 8b 0e 4c 8b 46 08 <48> 89 0f 4c 89 47 08 83 ea 10 48 8d 76 10 48 8d 7f 10 75 e5 f3 c3 [ 147.012761][T10124] RSP: 002b:00007fff9fe5a688 EFLAGS: 00010202 [ 147.018838][T10124] RAX: 0000000020000008 RBX: 0000000001190f50 RCX: 0000000000000000 [ 147.026811][T10124] RDX: 0000000000000010 RSI: 0000000001190f70 RDI: 0000000020000008 [ 147.034787][T10124] RBP: 0000000001190f58 R08: 0000000000000000 R09: 0000000001190f30 [ 147.042761][T10124] R10: 00007fff9fe5a760 R11: 0000000000000246 R12: fffffffffffffffe [ 147.050733][T10124] R13: 000000000002394a R14: 00000000000003e8 R15: 000000000118bfd4 07:20:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="dd7ce2f4f741aaaaaaaaaabb080045000020000000000011907800000000e000000100004e22000c9058205e2600"], 0x0) 07:20:39 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003800)={0x0, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x7}, [@generic={0x3, 0x5, 0xe, 0x0, 0x8}, @generic={0xff, 0x8, 0x6, 0x81, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe023, 0x0, 0x0, 0x0, 0xdcd5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f00000034c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, &(0x7f00000037c0)={0x5, 0x0, 0x6, 0xa}, 0x10}, 0x78) r3 = socket(0x21, 0x800, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="b1fcffff", @ANYRES16=r6, @ANYBLOB="080029bd7000ffffffff4c000000000099001f0000a5fb752a00"], 0x1c}}, 0x10000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000007980)={&(0x7f0000007880)={0x10, 0x0, 0x0, 0xc00008}, 0xc, &(0x7f0000007940)={&(0x7f00000078c0)={0x44, r4, 0xa, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x110}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}]}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}]}, 0x44}}, 0x0) 07:20:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="2d17c20000000000240012800b0001006d616373656300001400028005000b0001000000173637cebc487b100a000500140000000000000008000a009f53c40401000000000000002708abaa08e51c37f1a4ef3d99734108520184f010020d18fa1443566ad46b410467999144ad825e"], 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x24c, 0x17, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff9caf}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3747d2c9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x24c}}, 0x4001) write$binfmt_misc(r0, 0x0, 0x7f5) 07:20:39 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x7, &(0x7f0000000780)=@raw=[@generic={0x3e, 0x2, 0x7, 0x0, 0x4}, @ldst={0x34619172ae0409a2, 0x0, 0x0, 0x8, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}, @jmp={0x5, 0x0, 0x9, 0x5, 0x8, 0xfffffffffffffffc, 0x4}, @ldst={0x0, 0x1, 0x2, 0x2, 0x5, 0x18, 0x8}, @exit], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x6, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x200}, 0x10}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c80600991081d69f69c2000000000000000000", @ANYRES16=r5, @ANYBLOB="020025bd7000fbdbdf25090000000c00038008000300010000002800028014000100ac14140e00000000000000000000000006000f000900000006000f000100000058000380060004000000000008000500ac14142208000500ac1414100600040000200000060007004e240000080001000200000014000600fe8000000000000000000000000000aa080003000200000008000500e0000002080004000000000008000400020000000800050009000000080005007f0000000800040001000000"], 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x68, 0x0, 0x98, 0x0, 0x98, 0x180, 0x178, 0x178, 0x180, 0x178, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES64=r4], 0xfffffd9d) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r3, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1, 0x2013, r3, 0x0) mmap(&(0x7f0000147000/0x1000)=nil, 0x1000, 0x0, 0x2013, r3, 0x0) connect$tipc(r3, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x3}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x72ea}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 07:20:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, 0x7, 0x326, 0x0, 0xfe}, 0x9c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="66adb75856b16eff4d7581316856899c9c7d", 0x12}, {&(0x7f0000000200)="7e612fbdf0b41a1df9c7dabdc15445b292883f6204d6b35b1c3c", 0x1a}, {&(0x7f0000000240)="b77178dfaf4ec1ac959b2b7538b468a5e0165a0a6bc3f571250548cee0261fe5253676d4102b280b91aaf46752de3e40384e971ea6b899aa20fd86e2104c05f34cf5e78b78", 0x45}, {&(0x7f00000002c0)="b77653deed23312735e718ba08c3cb54248dd1d5d537896f34c258ae7e64720f2ecf8cdfdc074ec109ac7de8715ab2f00d49d7bb98d16e6122237e", 0x3b}, {&(0x7f0000000300)="d691", 0x2}], 0x5, 0x5, 0x10000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000e7e47e0c00", @ANYRES32=r8, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x57fafbcacbe666ee}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000480)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x6c, {0x2, 0x4e24, @multicast2}, 'veth1_macvtap\x00'}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d03fff36bc61c9dde85946a9bef561e37bc8009cfda", @ANYRES32=r8, @ANYBLOB="00673aab00000100000000"], 0x20}, 0x1, 0x74}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r1, 0x4, 0x3f, 0x401, 0x80000001, 0x20}, 0x14) 07:20:39 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1}}], 0x400000000000240, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x88f7}, @val={0x1, 0x4, 0x8, 0x17, 0xff38, 0x82}, @ipv6=@generic={0x1, 0x6, "ad3acb", 0x20, 0x5c, 0x1, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@dstopts={0x6c, 0x3, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}]}]}}}, 0x56) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000340)={{r3}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000180)={0x0, 0x1, 0x65ab, 0xa9c, {0xa, 0x0, 0x5, 0x0, 0x80000000}, [0x3]}}, @subvolid=0x1ff}) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) [ 147.217647][T10225] SET target dimension over the limit! [ 147.220389][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:20:39 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1092], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x26}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="4d3513ef87456509000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 147.290763][T10232] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 147.315991][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:20:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x2bc, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x24d, 0x4e}}}}, [@NL80211_ATTR_TX_RATES={0x29c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x7ff, 0x3ff, 0x6, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x800, 0x80, 0x1f, 0x3, 0x2, 0x8001, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x101, 0x46f, 0xad, 0x7, 0x80, 0xf000]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x1}, {0x6, 0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x2, 0x3}, {0x3, 0x8}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x7}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {}, {0x3, 0x3}, {0x7, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x4}, {0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x6c, 0x1, 0x60, 0xc, 0x6c, 0x18, 0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x31f6, 0x1, 0x8, 0x6, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x2, 0x18, 0x6, 0x1, 0x48, 0x36, 0x36, 0x30, 0x2, 0x48, 0x1, 0x1, 0x1, 0x24, 0xc, 0x5, 0x30, 0x12, 0x6c, 0x24, 0x1b, 0x3, 0xb, 0x30, 0x2, 0x2, 0x5, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x3c, 0x3ff, 0x2, 0x3, 0x101, 0xfff]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x3}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0x1}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x16, 0x6, 0x2, 0x36, 0x16, 0x24, 0x1, 0x9, 0x60, 0x9, 0x36, 0x9, 0x24, 0x3, 0x36, 0xbb2af8f0b309aac8, 0x30, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x9, 0x6c, 0x8566578db46971a, 0x5, 0x24, 0x1b, 0x48, 0x38, 0x1, 0x30, 0x9, 0x3, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x521, 0x1, 0x2, 0xd5e0, 0x81, 0x2]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x7, 0x4, 0x1, 0x1, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1}, {0x1}, {0x1}, {0x4, 0x2}, {0x6}, {0x6, 0xa}, {0x1, 0x4}, {}, {0x4, 0x1}, {0x1, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x4, 0x5}, {0x1}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x13}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x3}, {0x7}, {0x0, 0x5}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x4, 0xc, 0x24, 0x16, 0x16, 0x6, 0x6c, 0x6, 0x4, 0x25b982e6cb3b3a60, 0x48, 0x16, 0x48, 0x16, 0x16, 0x1b, 0x18, 0x2, 0x6c, 0x18, 0x2, 0x9, 0xc, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {}, {0x5, 0x4}, {0x5, 0x9}, {}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0xa}, {0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x9, 0x3, 0x36, 0x2d, 0x30, 0x4, 0x12, 0x3, 0x1b, 0x24, 0x5, 0x4, 0x3, 0xb, 0x30, 0xc, 0x1, 0x4, 0x4, 0x30, 0x8, 0x30, 0x2, 0x18, 0x12, 0x3, 0x1b, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x7}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x5}, {}, {0x1}, {0x5, 0x2}, {0x2, 0x3}, {0x5, 0x8}, {0x3, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x3}, {0x6, 0x6}, {0x2, 0x8}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x7}]}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) [ 147.402634][T10232] device batadv0 entered promiscuous mode [ 147.437144][T10232] device macsec1 entered promiscuous mode [ 147.485004][T10237] SET target dimension over the limit! [ 147.508585][T10232] device batadv0 left promiscuous mode 07:20:39 executing program 4: sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d1, &(0x7f00000001c0)) 07:20:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x1) accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet(0x2, 0x0, 0x80) sendfile(r2, r0, 0x0, 0x4000002) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 07:20:39 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1}}], 0x400000000000240, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x88f7}, @val={0x1, 0x4, 0x8, 0x17, 0xff38, 0x82}, @ipv6=@generic={0x1, 0x6, "ad3acb", 0x20, 0x5c, 0x1, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@dstopts={0x6c, 0x3, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}]}]}}}, 0x56) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000340)={{r3}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000180)={0x0, 0x1, 0x65ab, 0xa9c, {0xa, 0x0, 0x5, 0x0, 0x80000000}, [0x3]}}, @subvolid=0x1ff}) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) 07:20:39 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1}}], 0x400000000000240, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x88f7}, @val={0x1, 0x4, 0x8, 0x17, 0xff38, 0x82}, @ipv6=@generic={0x1, 0x6, "ad3acb", 0x20, 0x5c, 0x1, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@dstopts={0x6c, 0x3, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}]}]}}}, 0x56) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000340)={{r3}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000180)={0x0, 0x1, 0x65ab, 0xa9c, {0xa, 0x0, 0x5, 0x0, 0x80000000}, [0x3]}}, @subvolid=0x1ff}) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) [ 148.094688][T10223] syz-executor.1 (10223) used greatest stack depth: 22920 bytes left 07:20:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x12012, r0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000740)="9c", 0x1}], 0x1) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 07:20:40 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 148.616940][T10285] IPVS: ftp: loaded support on port[0] = 21 [ 148.696207][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.720748][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.796846][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:20:41 executing program 0: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x80, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x5000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x23fa00) socket$inet(0x2, 0x0, 0x0) 07:20:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000004c0000000800030027cdca01aa6b119b607a9f3e445894ff41b2796c96019bf00db0c89de51f2df2d46874e03a1efc5718db4948ac0da204c3a1e96fb6e02c22decb45ff3363a718f2fdebecda468b1169f15f92ffd0a533f0d507722478c5e1ecb8e92aacf8944b411b514bbe53c24897df51c89214222cf168eb934661ab492f0ef2ca35775d5bf8257e184bf8e9c75da203de0039b1e0f2852b85089b6d1d1fba45881a50005f46000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f00000001c0)=0x32, 0x3) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) 07:20:41 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getchain={0x3c, 0x66, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xffef}, {0xfff2, 0x6}, {0x6, 0x2}}, [{0x8, 0xb, 0x800100}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x104}, 0x4004c800) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}}, 0x4005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='workqueue_queue_work\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0xb38, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x68}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40080) 07:20:41 executing program 4: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x9, 0x33, 0x1, 0x3, 0x0, 0x80, 0x3, 0x2, 0x1, 0x81, 0x7, 0xed, 0xa9}, 0xe) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000080), 0x4) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, [], [{}, {0xffffffff}]}) 07:20:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4014004}, 0x20004000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, 0x1}, 0x38) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="88002100", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250c0000003c0002800800040006000000080004004650000008000600b304000005000d000100000008000800008000000800030003000000080005008000000008000600ffffffff280002801400010000000002000000000000000000000000060002004e20000008000600fb9b0a640800040090000000"], 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000440)="247c5241103427c8d0c8ade1560ac212036e6de3cfe7a9b130478f59e234340278aad6d7101c69bbb3fde12efb9731aeb42d115b7ab6f5fb7c6543f0df38b60c784567718798ead6a983352ccd97e652a49c65629545715a4f342a85008687b4a35affd76439349645f10e466076209793fe41a6e226896ab9e1862437d018fdfbc4cc65f22a4c28e7762211c90f4cb9ef02b19fbf108185b35e3518d2fc595bff190ce740568c6aae78212dafd2626afa7dbf32e7f109287a98af27ff9806b8ba9fafb078e2963d7ca059ebb2cd9fffd9d4f6601fadaa891a3a", &(0x7f0000000540)}, 0x20) getsockname(0xffffffffffffffff, &(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000780)=0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000006c0)={0x18}, 0x1) [ 149.109823][T10285] IPVS: ftp: loaded support on port[0] = 21 [ 149.118687][ T34] audit: type=1804 audit(1604733641.171:8): pid=10331 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir916752200/syzkaller.TL7ndE/11/memory.events" dev="sda1" ino=15797 res=1 errno=0 [ 149.215421][ T9837] Bluetooth: hci5: command 0x0405 tx timeout 07:20:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x12040050) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 07:20:41 executing program 4: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x9, 0x33, 0x1, 0x3, 0x0, 0x80, 0x3, 0x2, 0x1, 0x81, 0x7, 0xed, 0xa9}, 0xe) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000080), 0x4) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, [], [{}, {0xffffffff}]}) [ 149.445590][ T34] audit: type=1804 audit(1604733641.501:9): pid=10331 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir916752200/syzkaller.TL7ndE/11/memory.events" dev="sda1" ino=15797 res=1 errno=0 07:20:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x1) accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet(0x2, 0x0, 0x80) sendfile(r2, r0, 0x0, 0x4000002) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 07:20:41 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getchain={0x3c, 0x66, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xffef}, {0xfff2, 0x6}, {0x6, 0x2}}, [{0x8, 0xb, 0x800100}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x104}, 0x4004c800) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}}, 0x4005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='workqueue_queue_work\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0xb38, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x68}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40080) 07:20:41 executing program 0: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x80, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x5000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x23fa00) socket$inet(0x2, 0x0, 0x0) 07:20:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x1) accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet(0x2, 0x0, 0x80) sendfile(r2, r0, 0x0, 0x4000002) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 149.834291][ T34] audit: type=1804 audit(1604733641.881:10): pid=10384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir916752200/syzkaller.TL7ndE/12/memory.events" dev="sda1" ino=15818 res=1 errno=0 07:20:44 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 07:20:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="7e90ec04107b977c4f6c50c7240e989f4e50173552fdf2e84cedb45cb164aee83f148b851adbc638536fa2015aa2ef", 0x2f}], 0x1, 0x2, 0xfffffffd) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000200)={0x0, 0xe8, [0x3, 0x0, 0x3, 0x80, 0x5, 0x400]}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0), 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x80}) 07:20:44 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x6, @multicast}, 0x40, {0x2, 0x4e24, @broadcast}, 'vcan0\x00'}) ioctl(0xffffffffffffffff, 0xc3, &(0x7f0000000080)="786376a303b70b37d21586a40ad453f7465b3f98b0e75c2bfdbb95844d4cf203f57eb675e46c9085e4b4d4eea005bc8cbfa473fc2bda0a7c9ad478061ff40113cf9484027db9ddc482c191f7db7e0708aced909659b76b5031914b5a65f65d2c673f5c966a00b4a1dde01c66e02e8e8f096fe4e9c4b2ef442e19783091d7f94803f943efa2d2870761030cb90bf13f5f744f2806014978b4d1b3b7cb4179c2db460942d1093d08866c528ff612bca693581ed6427e677f080c07f89076cacdfc03c2d70bafcdea") 07:20:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff4a, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 07:20:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @empty, 0x39}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 07:20:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3, @ANYBLOB="5b8208006de14950e2747eaaf7b587266b29ea524fb79f"], 0x40}}, 0x0) [ 152.238882][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:44 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e40)=""/235, 0xeb}], 0x1}}], 0x3, 0x2100, 0x0) shutdown(r0, 0x2) 07:20:44 executing program 3: r0 = socket(0x1e, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xac, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000077a4d8db97cf02477034617d46d81259debf0ccb0f000000002f1d5338c4b934f23c7802a6b9f4e1472836dcc3a725e948ced2556be9cc661cd2a6429cb28a812aac4c8f70011c05b605", @ANYRES16=r2, @ANYBLOB="0307000000000000000006000000"], 0x14}}, 0x0) 07:20:44 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) [ 152.367071][T10433] IPVS: ftp: loaded support on port[0] = 21 07:20:44 executing program 1: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x8, "916744"}, 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4, 0x0, 0x0, 0x0, 0xfffd, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in=@private}}, 0xe8) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 07:20:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="7e90ec04107b977c4f6c50c7240e989f4e50173552fdf2e84cedb45cb164aee83f148b851adbc638536fa2015aa2ef", 0x2f}], 0x1, 0x2, 0xfffffffd) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000200)={0x0, 0xe8, [0x3, 0x0, 0x3, 0x80, 0x5, 0x400]}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0), 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x80}) [ 152.739152][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:44 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x11, 0x3f00}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340)='NLBL_CALIPSO\x00') setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r4 = socket$inet(0x2, 0x800, 0xcec) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x40) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) splice(r2, 0x0, r3, 0x0, 0x10003, 0xe) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x3, 0x3, 0x2, 0x80}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x1b, &(0x7f00000001c0)=""/27, 0x40f00, 0x0, [], 0x0, 0x75, r2, 0x8, &(0x7f0000000200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xe, 0x2, 0x1}, 0x10, r5, r0}, 0x78) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000001200000000000000000000000000d24d64d477cdac50586de4d73133eda842c2fc1d8155ab5831477f7b3024221bb0f1b7c5ddaeac71c1a7bde39c"], 0x6) 07:20:44 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 07:20:44 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xaba6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) syz_genetlink_get_family_id$netlbl_calipso(0x0) 07:20:45 executing program 1: pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x0, 0x9a69, 0x64c, 0x3, 0x3}, &(0x7f00000000c0)={0x100000000, 0x8000, 0x6, 0x0, 0x4478, 0x0, 0x217}, &(0x7f0000000100)={0x7, 0x20, 0x7, 0x800, 0x1, 0x101, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x10}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x8, 0x35}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket(0x18, 0x80000, 0xfff) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7d, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="f913f15ad999512aa0071d04263087dc128c07e61b5d5220378198b826d762aecbff7b1985096bd11c4dc7e0f9eb8c20684d3801d4cd35741673b5b75f200232f877726466e5c1837f7ba26970717458c843f1d4ce4e15a75500"/104], &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x6, 0x8004, 0x2569284b, 0xca82, 0x8, 0x7fff, 0x5, r3}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x7fff}, 0x8) [ 153.024838][T10483] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10483 [ 153.034685][T10483] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 153.041379][T10483] CPU: 0 PID: 10483 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 153.050170][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.060242][T10483] Call Trace: [ 153.063562][T10483] dump_stack+0x107/0x163 [ 153.067916][T10483] check_preemption_disabled+0x123/0x130 [ 153.073577][T10483] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 153.079318][T10483] trace_hardirqs_on+0x5b/0x1c0 [ 153.084191][T10483] __bad_area_nosemaphore+0xc6/0x400 [ 153.089504][T10483] do_user_addr_fault+0x7d7/0xb40 [ 153.094558][T10483] exc_page_fault+0x9e/0x180 [ 153.099166][T10483] ? asm_exc_page_fault+0x8/0x30 [ 153.104152][T10483] asm_exc_page_fault+0x1e/0x30 [ 153.109017][T10483] RIP: 0033:0x43c6b0 [ 153.112932][T10483] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 153.132581][T10483] RSP: 002b:00007fed33e56ba8 EFLAGS: 00010246 [ 153.138670][T10483] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.146688][T10483] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 153.154679][T10483] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007fed33e56bb0 [ 153.162676][T10483] R10: 0000000000000000 R11: 000000000000000f R12: 00007fed33e56bf0 [ 153.171115][T10483] R13: 00007ffdf1e5568f R14: 00007fed33e589c0 R15: 000000000118bf2c [ 153.179880][T10483] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10483 [ 153.189762][T10483] caller is lockdep_hardirqs_on+0x38/0x110 [ 153.195653][T10483] CPU: 0 PID: 10483 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 153.204425][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.214482][T10483] Call Trace: [ 153.217769][T10483] dump_stack+0x107/0x163 [ 153.222094][T10483] check_preemption_disabled+0x123/0x130 [ 153.227741][T10483] ? __bad_area_nosemaphore+0xc6/0x400 [ 153.233190][T10483] lockdep_hardirqs_on+0x38/0x110 [ 153.238201][T10483] __bad_area_nosemaphore+0xc6/0x400 [ 153.243475][T10483] do_user_addr_fault+0x7d7/0xb40 [ 153.248495][T10483] exc_page_fault+0x9e/0x180 [ 153.253075][T10483] ? asm_exc_page_fault+0x8/0x30 [ 153.257999][T10483] asm_exc_page_fault+0x1e/0x30 [ 153.262854][T10483] RIP: 0033:0x43c6b0 [ 153.266736][T10483] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 153.286328][T10483] RSP: 002b:00007fed33e56ba8 EFLAGS: 00010246 [ 153.292382][T10483] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.300343][T10483] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 153.308315][T10483] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007fed33e56bb0 [ 153.316275][T10483] R10: 0000000000000000 R11: 000000000000000f R12: 00007fed33e56bf0 07:20:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x0, 0xfffffffffffffffe}) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}}, 0x20040081) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x20000004) [ 153.324231][T10483] R13: 00007ffdf1e5568f R14: 00007fed33e589c0 R15: 000000000118bf2c [ 153.392878][T10488] IPVS: ftp: loaded support on port[0] = 21 07:20:45 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0xdc}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x8000, 0x8, 0x100000001}) getsockname$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 07:20:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300)={0x23, 0x8, 0x2, 0x9}, 0x10) read(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$AUDIT_DEL_RULE(r2, 0x0, 0x4040040) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = accept(r2, &(0x7f0000000200)=@caif=@util, &(0x7f0000000180)=0x80) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x40, @ipv4={[], [], @rand_addr=0x64010102}, 0x29}}, 0x24) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xed6) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000001101000001000000ec000000000034ae5ce9c45092052e92df48259c09ee651e11a286a00ddc5f2d66e976cf6ca9ed105ca274333f1a4c3cb29c5acfc1c28c86a725b0fecb1d63d24fdbfa7e36a54f05e089b7eb1c2d04d327ccf3b68b1c91ee2eee8afdc6757ae8d4e0222ba9a9da459a2bedd1b8ad1ddff8dc4e92ac40ca0f719775901d59c58ea760dbccfe879caecc258363353191346e5234a7058d8e2ff611792f517299f3987578245da8bf3b2f7600974741fb201897090440fd67906f0242eddf298896"], 0x18}}], 0x1, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000140)=[0x3, 0x1], 0x2) mmap(&(0x7f00003c9000/0xe000)=nil, 0xe000, 0xc, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x7, 0x6, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x400000c}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000440)={{r5}, "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"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0xfffffffe) 07:20:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x7, 0x4, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40441c0}, 0x80) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000140)=""/198, &(0x7f0000000240)=0xc6) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800700010062faffffffffffffff0002800500070007000000"], 0x3c}}, 0x0) 07:20:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e20, @empty}, 0xa8, 0x0, 0x0, 0x0, 0xa98, &(0x7f00000000c0)='bond_slave_0\x00', 0x5, 0x19, 0xff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000004c00000008000300773664ab9393c851f374e90191e81b96a4126643d2b0af0e2ecfdc044616c492e91dd88e1326b327cc0453ce7287c7aa79e3e6bd8640cee9254736baf19b5c19a2b31400ac59", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r10 = accept4(r7, 0x0, &(0x7f0000000240), 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r10, 0x111, 0x5, 0x1ff, 0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000008004c00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x3, 0x1, 0x3, {0xa, 0x4e24, 0x5, @local, 0x4}}}, 0x3a) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xb1d000) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0xfb88}) [ 153.838718][T10534] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/10534 [ 153.840325][T10533] tipc: Started in network mode [ 153.848280][T10534] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 153.848298][T10534] CPU: 0 PID: 10534 Comm: syz-executor.4 Not tainted 5.10.0-rc1-syzkaller #0 [ 153.848306][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.875896][T10533] tipc: Own node identity 7f, cluster identity 4711 [ 153.878709][T10534] Call Trace: [ 153.878734][T10534] dump_stack+0x107/0x163 [ 153.878759][T10534] check_preemption_disabled+0x123/0x130 [ 153.878780][T10534] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 153.878802][T10534] trace_hardirqs_on+0x5b/0x1c0 [ 153.897730][T10533] tipc: 32-bit node address hash set to 7f [ 153.898628][T10534] __bad_area_nosemaphore+0xc6/0x400 [ 153.898654][T10534] do_user_addr_fault+0x7d7/0xb40 [ 153.898679][T10534] exc_page_fault+0x9e/0x180 [ 153.913084][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.