Warning: Permanently added '[localhost]:40467' (ECDSA) to the list of known hosts. 2026/01/13 11:27:42 fuzzer started 2026/01/13 11:27:43 dialing manager at localhost:38155 syzkaller login: [ 52.980517] cgroup: Unknown subsys name 'net' [ 53.056111] cgroup: Unknown subsys name 'cpuset' [ 53.078750] cgroup: Unknown subsys name 'rlimit' 2026/01/13 11:27:54 syscalls: 211 2026/01/13 11:27:54 code coverage: enabled 2026/01/13 11:27:54 comparison tracing: enabled 2026/01/13 11:27:54 extra coverage: enabled 2026/01/13 11:27:54 setuid sandbox: enabled 2026/01/13 11:27:54 namespace sandbox: enabled 2026/01/13 11:27:54 Android sandbox: enabled 2026/01/13 11:27:54 fault injection: enabled 2026/01/13 11:27:54 leak checking: enabled 2026/01/13 11:27:54 net packet injection: enabled 2026/01/13 11:27:54 net device setup: enabled 2026/01/13 11:27:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 11:27:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 11:27:54 USB emulation: enabled 2026/01/13 11:27:54 hci packet injection: enabled 2026/01/13 11:27:54 wifi device emulation: enabled 2026/01/13 11:27:54 802.15.4 emulation: enabled 2026/01/13 11:27:54 fetching corpus: 0, signal 0/0 (executing program) 2026/01/13 11:27:55 starting 8 fuzzer processes 11:27:55 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x80000001, 0x2205c0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/76, 0x4c}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x1, 'netpci0\x00', {}, 0xa7a7}) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r1 = socket(0x22, 0x100003, 0x7fff) sendto(r1, &(0x7f0000000200)="ef64fa5447c2480c67490e67bbbc16d537816088763c775c149f636332a4a2418bfe664e8bdc22dcbc36ec876a16193f0a5ea35d0888fc03a27c829c28981fe6394da42c0029c7305a3ed687492c5b702a1d5ee38bbee8", 0x57, 0x8000, &(0x7f0000000280)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80) getpeername(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000380)=0x80) accept4(r1, &(0x7f00000003c0)=@qipcrtr, &(0x7f0000000440)=0x80, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000005c0)={&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000004c0)=""/196, 0xc4}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000600)={0x1, 'veth0\x00', {}, 0xfff}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8094}, 0x4000) io_uring_setup(0x8b1, &(0x7f0000000740)={0x0, 0x525, 0x20, 0x3, 0x336, 0x0, r0}) write$cgroup_freezer_state(r0, &(0x7f00000007c0)='THAWED\x00', 0x7) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7fffffff}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xef31) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(r1, &(0x7f00000008c0)=@isdn, &(0x7f0000000940)=0x80, 0x100000) getsockname(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000a00)=0x80) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c845}, 0x0) 11:27:55 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x4770, &(0x7f0000000040)={0x0, 0x6ebe, 0x10, 0x3, 0x348, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x2b16, &(0x7f0000000140)={0x0, 0xc817, 0x1, 0x1, 0x24f}) r4 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x412040) r5 = socket$inet(0x2, 0x1, 0xcb) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[r2, r3, r4, r0, 0xffffffffffffffff, r5]}, 0x6) r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1000, 0x400) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/120, 0x78}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x1, 0x18, 0x11, 0x18f, &(0x7f00000003c0)}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000900)={&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000840)=""/162, 0xa2}) r7 = syz_io_uring_setup(0x231e, &(0x7f0000000940)={0x0, 0x8366, 0x2e, 0x3, 0x1a6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) write$cgroup_freezer_state(r0, &(0x7f0000000a40)='FROZEN\x00', 0x7) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x14050, r1, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000c00)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000ac0), &(0x7f0000000bc0)='./file0\x00', 0x800, 0x5000, 0x1}, 0x1000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xd) [ 64.187460] audit: type=1400 audit(1768303675.741:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:27:55 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @in={0x2, 0x4e23, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, @sco, 0x2e4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800, 0x8, 0x1000}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x3, 0x40, @loopback, @remote, 0x40, 0x700, 0x9, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000ac0)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x7, 0x1, {{0x20, 0x4, 0x1, 0x6, 0x80, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp={0x44, 0xc, 0x10, 0x0, 0x4, [0x2, 0x3]}, @generic={0x89, 0x9, "885c0d1da2e55f"}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x3, [0x4]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0xa, [0x2]}, @rr={0x7, 0x7, 0xd0, [@multicast2]}, @timestamp_addr={0x44, 0x14, 0xd1, 0x1, 0x4, [{@multicast2, 0x1}, {@loopback, 0xc6d8}]}, @timestamp_prespec={0x44, 0x24, 0x70, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x9}, {@loopback, 0x6}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c00)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000d00)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d40)={'tunl0\x00', 0x0, 0x8, 0x7, 0x8000, 0x2, {{0x1a, 0x4, 0x1, 0x3, 0x68, 0x65, 0x0, 0xf8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, {[@generic={0x88, 0x12, "2aad747f245ddf1244e4734977f6d7dd"}, @lsrr={0x83, 0x27, 0xe7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @private=0xa010101, @remote, @local, @multicast2, @multicast1, @broadcast]}, @lsrr={0x83, 0x1b, 0xec, [@multicast2, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000003640)={'wg2\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003740)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000003840)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc008f4348eb9153b}, 0xc, &(0x7f0000004440)={&(0x7f0000003880)={0xba8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x4}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x502d}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8, 0x1, r1}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x381}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa31d}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff9706}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9b}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x27c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x1, 0x7}, {0x7, 0x6, 0x5a, 0x3f}, {0xffe1, 0x1f, 0x20, 0x6}, {0x0, 0x29, 0x7f, 0xffff5808}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x788c}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0xba8}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000044c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000004540)={0x0, @can, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @in={0x2, 0x4e21, @local}, 0xd5, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000004500)='team0\x00', 0x4, 0x3, 0x40}) socketpair(0x0, 0x6, 0xa90dfc9e, &(0x7f0000008580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_REG(r10, &(0x7f0000008900)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000088c0)={&(0x7f0000008600)={0x2c0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_REG_RULES={0xec, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffeffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7e69b61b}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x137c8de2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfe}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x198, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x59bf7f38}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2975}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcf}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xad}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb597}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe64}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7cf290d8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x99cedcc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x891}, 0x40208c0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000008940)={'batadv_slave_1\x00'}) r12 = accept4(r9, &(0x7f0000008a40)=@x25={0x9, @remote}, &(0x7f0000008ac0)=0x80, 0x80800) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008b40), r11) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000008d00)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000008cc0)={&(0x7f0000008bc0)={0xec, r13, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x81}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xd2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}]}, 0xec}}, 0x4000040) 11:27:55 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x4e23, @private=0xa010101}, @rc={0x1f, @any, 0xc6}, @hci={0x1f, 0x0, 0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='wlan1\x00', 0x110, 0x8, 0x7}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) r1 = socket$inet(0x2, 0x3, 0x1) r2 = accept4(r1, 0x0, &(0x7f0000000200), 0x80000) r3 = socket$inet(0x2, 0x2, 0x7) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000280)) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x5, 0x3ff}) r5 = accept$inet(r2, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000004c0)={0x2, {0x2, 0x0, 0x20, 0x4, 0x8}}) getsockname(r2, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f00000005c0)) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000640), r7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000680)={'syztnl1\x00', r6, 0x8000, 0x8, 0x8, 0x98fc, {{0x1d, 0x4, 0x1, 0x8, 0x74, 0x67, 0x0, 0xa3, 0x29, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x23, 0x27, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @local, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0x13, 0x38, [@local, @broadcast, @multicast2, @local]}, @cipso={0x86, 0x23, 0x3, [{0x5, 0x5, "1c0b89"}, {0x7, 0xb, "6d80aa912ff0aa44fa"}, {0x5, 0xd, "fd48233eb86507a5bef707"}]}, @rr={0x7, 0x7, 0x54, [@local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000000e00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000940)={0x470, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r11}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7f, 0x80, 0x40, 0x100}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4f55, 0x6, 0x2, 0x101}, {0x2, 0x4, 0x3, 0xff}, {0x8, 0x2, 0x4, 0x8}, {0x4, 0x9, 0x2, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x5, 0x7}, {0x101, 0x0, 0xbd, 0x6}, {0x401, 0x1, 0x8}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 11:27:55 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xe0}, 0x800) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000180)={'dummy0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/147, 0x93}], 0x1, &(0x7f0000000380)=""/18, 0x12}, 0x8}, {{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/163, 0xa3}], 0x3, &(0x7f00000006c0)=""/34, 0x22}, 0xec}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/157, 0x9d}, {&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000980)=""/18, 0x12}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/227, 0xe3}, {&(0x7f0000000b80)=""/118, 0x76}], 0x7, &(0x7f0000000c80)=""/14, 0xe}, 0x10001}, {{&(0x7f0000000cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d40)=""/21, 0x15}], 0x1}, 0x13}], 0x4, 0x2000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000ec0)=""/241, &(0x7f0000000fc0)=0xf1) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x15c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x148, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40045}, 0x4000004) socketpair(0x29, 0x5, 0x1f, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000012c0), r0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xac, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0xac}}, 0x24008000) syz_genetlink_get_family_id$wireguard(&(0x7f0000001440), r1) getpeername(r1, &(0x7f0000001480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, &(0x7f0000001500)=0x80) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001640)={'ip6tnl0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x62, 0x9, 0x21, @local, @mcast1, 0x10, 0x2fbe0b97cac0ef61, 0xf, 0x8}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000016c0)={0x0, @llc={0x1a, 0x300, 0x9, 0x1, 0x7d, 0xe, @multicast}, @nfc={0x27, 0x0, 0x1, 0x5}, @xdp={0x2c, 0x5, 0x0, 0x37}, 0xad, 0x0, 0x0, 0x0, 0xe74, &(0x7f0000001680)='vlan1\x00', 0x4, 0xda, 0x7}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000001940)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000001900)={&(0x7f0000001740)={0x1a8, r5, 0xd0c, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb402}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xb1, 0x5, "915428911c02d8b0a9d507379bff12f8cfc2cfd9dd516058072671efbe4e522afbc30b0ea5cfcf1ca214421d091c261d0daf213cea23667a1a9edace491c4c9c701ab83d652efe47ad11588e470c42c4fc7172311bc13fb1fa7c1d6bfc334a63f6fa3708bd6bbef33c0a05cc9ef94bdcd0eef6c58b8e459eacb71a89755cb2269ebf976854c3f276e6299597431b75a48b6fe1e5d456985d7e32fa41196861e1d13ab8ab27fe043fc6ff1483ee"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7, 0x5, "45468d"}]}, @ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_WOL_SOPASS={0x1f, 0x3, "ed4a6f747c542722f4f255c83d879736fbf02f71d58a04b699ae8e"}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40001}, 0x4010) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001980)={0x6, 'dummy0\x00', {}, 0x2}) accept4(r2, 0x0, &(0x7f00000019c0), 0x40000) r8 = accept4(r0, &(0x7f0000006940)=@ax25={{0x3, @rose}, [@netrom, @default, @netrom, @remote, @netrom, @netrom, @default, @default]}, &(0x7f00000069c0)=0x80, 0x80000) getsockname(r8, &(0x7f0000006a00)=@generic, &(0x7f0000006a80)=0x80) 11:27:55 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x6, 0x2, 0x1, 0xffff, 0x16, "5136dcf4ab62e21c"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x1f, 0x1, 0x190, &(0x7f0000000140)}) r1 = socket$inet(0x2, 0x5, 0x8001) bind(r1, &(0x7f0000000580)=@hci={0x1f, 0x1}, 0x80) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000600)={0x9, 0x4, 0x1, 0x1}) io_cancel(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000640)="00ac6b9d342f3b53bdcb2419404a5bfb63f51b7fe9f752b71fda1da078417d24db44d7cc213e4f24fc8a0046ec05c6aaa26ee905c0e30762ac67a3f4ffbfe0a3756efffafec0763140c67fe7bed6ac3e4f28b45ddeec5dc98946e373d2f376fab5ff17749c956b01d94c439af26ce2e745e26d91d2bdb1986935b4e6fdcd74a2ea9207de74d1436a4a4ebe79dde94977de777547bbcb542cbee4c9791156249be434dddd7be801a408c010d66e30761ddef9c5a3c98134b727f79bd4117e44aabe01f5d1be586b3bef73a8aa8eadac4ac8f3229b14122d68b3d3525836fa3dcf5fd437b6337a70174fd8d8f9252bbfe970da4734ad", 0xf5, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x87, 0x8000, 0x40, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x68, 0x0, 0x40, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xf9, [@remote, @private=0xa010101, @multicast2, @loopback, @multicast2, @remote]}, @end, @noop, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xf, "854ed1b2e561ae21d08db007d4"}, {0x0, 0x10, "db455c65ee19f812dd709a8672a2"}]}, @lsrr={0x83, 0xb, 0x1c, [@remote, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x1b, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xb48a, 0x7fffffff, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xbf, [@loopback, @remote, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x8, [{@remote, 0x1}, {@multicast1, 0x4}, {@local, 0x7}]}, @end, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0x2, [{@empty, 0x4}, {@empty, 0x9}, {@remote, 0xcb}, {@broadcast, 0x8}, {@remote, 0x4}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0xaf}, {@broadcast, 0x2}, {@private=0xa010100, 0x200}]}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x7, [0x40]}, @timestamp_prespec={0x44, 0xc, 0x3a, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}]}, @rr={0x7, 0x7, 0xbb, [@local]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x9, [{@empty, 0x4}, {@empty, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x1, 0x8, 0x400, 0x101, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0x67, 0x1, [{0x6, 0xf, "eeff349767ae41a25a51de5b28"}, {0x6, 0x9, "8d3bd650e54dbd"}, {0x2, 0xf, "fbd89f7b9d4b9b5d8212e8c894"}, {0x2, 0x11, "37ca7ac88a0c214b1f338e9d233863"}, {0x7, 0xe, "9b33655d87d5e595fac25156"}, {0x2, 0xb, "c3a5dbc76da8fcb017"}, {0x0, 0x10, "3f3caedfe75dd5e57df7fc69ec1d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001180)={0x9b4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x39b9, 0x6, 0x4, 0x7}, {0x6000, 0x33, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9562}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x0, 0x81, 0xffffff7a}, {0x0, 0x7f, 0xa2, 0x1ff}, {0x1, 0x2, 0x6, 0x10}, {0x0, 0x3, 0x97, 0xfffffffb}, {0x5, 0x81, 0xea, 0xfffffc3a}, {0x7f, 0x0, 0x1, 0x7}, {0x16, 0xfb, 0xff, 0x1}, {0x9, 0x3, 0x6, 0xff}, {0x6, 0x5, 0x3, 0x8001}]}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xee}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x10}, 0x40880) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001bc0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001c00)={'tunl0\x00', r10, 0x8, 0x7, 0x10000, 0x0, {{0xf, 0x4, 0x1, 0x19, 0x3c, 0x67, 0x0, 0x1f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, {[@rr={0x7, 0x1f, 0xef, [@broadcast, @loopback, @remote, @empty, @private=0xa010100, @multicast2, @multicast2]}, @timestamp={0x44, 0x8, 0x54, 0x0, 0xe, [0xffffffff]}]}}}}}) 11:27:55 executing program 6: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60002004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000000) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDENABIO(r3, 0x4b36) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)=0xffffffa7) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x5cd95bc0fd552f66, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44000) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000340)="1490e48493515d6cfacfc506df0ccbfff74a29ae8140d8d4c9279d6a99f7d6f54914e2b9e23c49225e4c1fff8f67707444a6ad24e9bea0bdf625ebd19c9e030fde08a2baeb8317cdd79bec41be63b55eec57c16ced92bd1e0ade5c03db79373e38f4cffcb8a00007e7f157674eed4488ab6bc975") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040084}, 0x40) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000004c0)) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000500)) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000540)) r7 = syz_open_dev$vcsu(&(0x7f0000000580), 0x8, 0x400000) recvmmsg(r6, &(0x7f0000003e40)=[{{&(0x7f0000001100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001180)=""/13, 0xd}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/150, 0x96}, {&(0x7f0000002280)=""/58, 0x3a}], 0x4, &(0x7f0000002300)=""/27, 0x1b}, 0x3}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002340)=""/225, 0xe1}, {&(0x7f0000002440)=""/192, 0xc0}, {&(0x7f0000002500)=""/157, 0x9d}, {&(0x7f00000025c0)=""/78, 0x4e}, {&(0x7f0000002640)=""/120, 0x78}, {&(0x7f00000026c0)=""/117, 0x75}, {&(0x7f0000002740)=""/11, 0xb}], 0x7}}, {{&(0x7f0000002800)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002880)=""/4, 0x4}, {&(0x7f00000028c0)=""/199, 0xc7}], 0x2, &(0x7f0000002a00)=""/239, 0xef}, 0x6668}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002b00)=""/43, 0x2b}, {&(0x7f0000002b40)=""/185, 0xb9}, {&(0x7f0000002c00)=""/113, 0x71}, {&(0x7f0000002c80)=""/158, 0x9e}, {&(0x7f0000002d40)=""/166, 0xa6}, {&(0x7f0000002e00)=""/76, 0x4c}, {&(0x7f0000002e80)=""/32, 0x20}, {&(0x7f0000002ec0)=""/206, 0xce}, {&(0x7f0000002fc0)=""/215, 0xd7}, {&(0x7f00000030c0)=""/167, 0xa7}], 0xa}, 0x8}, {{&(0x7f0000003240)=@can={0x1d, 0x0}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000032c0)=""/109, 0x6d}, {&(0x7f0000003340)=""/167, 0xa7}, {&(0x7f0000003400)=""/194, 0xc2}, {&(0x7f0000003500)}, {&(0x7f0000003540)=""/253, 0xfd}, {&(0x7f0000003640)=""/63, 0x3f}, {&(0x7f0000003680)}], 0x7}, 0x1000}, {{&(0x7f0000003740)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)}], 0x2, &(0x7f0000003880)=""/44, 0x2c}, 0x56}, {{&(0x7f00000038c0)=@x25, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003940)=""/156, 0x9c}, {&(0x7f0000003a00)=""/115, 0x73}, {&(0x7f0000003a80)=""/208, 0xd0}, {&(0x7f0000003b80)=""/192, 0xc0}, {&(0x7f0000003c40)=""/58, 0x3a}, {&(0x7f0000003c80)=""/35, 0x23}], 0x6, &(0x7f0000003d40)=""/205, 0xcd}, 0x8}], 0x7, 0x2000, &(0x7f0000004000)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000004380)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004340)={&(0x7f0000004040)={0x300, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x238, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "2cc1534628d139fb408e3a705ffe57b9a3b2901de255a7bc4d18e55185fff3e10cd83010a22b50f0280199fea92d79737e309c25146efae34d1fee40f820838494dd03df148baac829e1fdf54e15001cbfa92f16aa76d3a0a55883e1517aee9f31065545e9da549d68223e6a8e3e27a4bb98ce37ead0ce1f905389477a8a94140447861ecfb50feb90da5bfe4052f932a143f83b842f27f5020a77b714f0483a6cba56ba8dd0b8b7277370136da4ca1e794eb45713a9acbe9f727d31a0b2637d1f5ebb867867fa4f4cd2d216"}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nbd\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcd91}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+}*%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "43b882aa3a2b6a4914af94246720d818ba44837577bb0275a9790c6be64c72c8e7213a1a7ab0512f45f17fe417ce895eaa829bf19aed27dcfdd98d893fe03f668a5ccd7935aeaef42891885f004617c6cc0b0bf5d5edb4d072a49e567b5d1be07f5c2c833410d9e1860f846fa761ddb11d219ec27d6b2726fb12c028b707945c1c42988eed7893097d7123869cc86ced5e3c552fdcf358fd5b1479c81ba6ae72c808341923829a4df5f291dd3d64df45a78bafb798b6d2d64de00024532e8378acaf"}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11:27:55 executing program 7: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/7) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x9, 0x5, 0x188, &(0x7f00000000c0)}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000500)={0x2, 0x9, 0xff80}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000540)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000580)) r2 = syz_open_dev$vcsu(&(0x7f00000005c0), 0xffffffff, 0x301000) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000a00)={0x2, 0x0, 0x14, 0x15, 0x14f, &(0x7f0000000600)="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"}) ioctl$TCSBRK(r1, 0x5409, 0x4) r3 = syz_open_pts(r1, 0xc0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000a40)="1914a4d32da18aa5397693ed87239afb3410f1fd92bd9185aeb8f84896f32e02d7996ee873d4853910bee72e1f6a647bb355991da2144b3d23c141c1e5413c264e6dd49811a508d209d594ff8670a299e91ad1157327e546692e92a3a0607b7f2c9f630eb1ac7bb78cd1f1259c36597afdf33826c1f93fcd51b18290908c4f91b246b0a734470625c37e87347d24d014b01129bfc25e78c8a95cf158a17486b2e999350b76866edb3be99b309ac7aebfe59e0186cddc91ad2a2efbdcd59c2e9d3d6d02898d580f9ece392cecd3a71ae9e4d2232b49da933279a141b5a1996062") r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000b40)={0x101, 0x80, 0xff, 0x1, 0x1b, "ea571f797ec54242"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000b80)) r5 = syz_open_pts(r3, 0x2000) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000bc0)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000c00)) [ 65.343317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.347803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.350502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.357563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.362904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.413248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.415781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.418054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.433576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.441567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.489381] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.494639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.496647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.498342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.502554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.504514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.518359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.521409] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.535046] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.541309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.544170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.549500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.550701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.552682] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.556812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.558526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.561866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.564028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.571926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.573810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.666950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.693983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.694179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.707556] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.719866] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.720030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.747755] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.765766] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.778064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.830941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.436937] Bluetooth: hci0: command tx timeout [ 67.501606] Bluetooth: hci1: command tx timeout [ 67.564838] Bluetooth: hci2: command tx timeout [ 67.628273] Bluetooth: hci3: command tx timeout [ 67.629182] Bluetooth: hci4: command tx timeout [ 67.629267] Bluetooth: hci5: command tx timeout [ 67.821137] Bluetooth: hci6: command tx timeout [ 67.885280] Bluetooth: hci7: command tx timeout [ 69.485929] Bluetooth: hci0: command tx timeout [ 69.549552] Bluetooth: hci1: command tx timeout [ 69.612261] Bluetooth: hci2: command tx timeout [ 69.677249] Bluetooth: hci3: command tx timeout [ 69.677712] Bluetooth: hci4: command tx timeout [ 69.678155] Bluetooth: hci5: command tx timeout [ 69.869315] Bluetooth: hci6: command tx timeout [ 69.933354] Bluetooth: hci7: command tx timeout [ 71.533294] Bluetooth: hci0: command tx timeout [ 71.597353] Bluetooth: hci1: command tx timeout [ 71.661257] Bluetooth: hci2: command tx timeout [ 71.726260] Bluetooth: hci5: command tx timeout [ 71.726288] Bluetooth: hci4: command tx timeout [ 71.726832] Bluetooth: hci3: command tx timeout [ 71.916283] Bluetooth: hci6: command tx timeout [ 71.980269] Bluetooth: hci7: command tx timeout [ 73.582310] Bluetooth: hci0: command tx timeout [ 73.645416] Bluetooth: hci1: command tx timeout [ 73.708866] Bluetooth: hci2: command tx timeout [ 73.772328] Bluetooth: hci4: command tx timeout [ 73.773182] Bluetooth: hci3: command tx timeout [ 73.773269] Bluetooth: hci5: command tx timeout [ 73.965263] Bluetooth: hci6: command tx timeout [ 74.029234] Bluetooth: hci7: command tx timeout [ 101.944710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.945414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.173949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.174578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.333840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.334480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.485539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.486172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.582487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.583105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.638028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.638683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.816740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.817413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.910719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.911483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.021388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.022036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.022718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.023469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.033085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.034008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:28:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x4770, &(0x7f0000000040)={0x0, 0x6ebe, 0x10, 0x3, 0x348, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x2b16, &(0x7f0000000140)={0x0, 0xc817, 0x1, 0x1, 0x24f}) r4 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x412040) r5 = socket$inet(0x2, 0x1, 0xcb) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[r2, r3, r4, r0, 0xffffffffffffffff, r5]}, 0x6) r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1000, 0x400) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/120, 0x78}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x1, 0x18, 0x11, 0x18f, &(0x7f00000003c0)}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000900)={&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000840)=""/162, 0xa2}) r7 = syz_io_uring_setup(0x231e, &(0x7f0000000940)={0x0, 0x8366, 0x2e, 0x3, 0x1a6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) write$cgroup_freezer_state(r0, &(0x7f0000000a40)='FROZEN\x00', 0x7) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x14050, r1, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000c00)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000ac0), &(0x7f0000000bc0)='./file0\x00', 0x800, 0x5000, 0x1}, 0x1000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xd) [ 103.126339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.126921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:28:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x4770, &(0x7f0000000040)={0x0, 0x6ebe, 0x10, 0x3, 0x348, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x2b16, &(0x7f0000000140)={0x0, 0xc817, 0x1, 0x1, 0x24f}) r4 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x412040) r5 = socket$inet(0x2, 0x1, 0xcb) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[r2, r3, r4, r0, 0xffffffffffffffff, r5]}, 0x6) r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1000, 0x400) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/120, 0x78}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x1, 0x18, 0x11, 0x18f, &(0x7f00000003c0)}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000900)={&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000840)=""/162, 0xa2}) r7 = syz_io_uring_setup(0x231e, &(0x7f0000000940)={0x0, 0x8366, 0x2e, 0x3, 0x1a6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) write$cgroup_freezer_state(r0, &(0x7f0000000a40)='FROZEN\x00', 0x7) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x14050, r1, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000c00)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000ac0), &(0x7f0000000bc0)='./file0\x00', 0x800, 0x5000, 0x1}, 0x1000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xd) [ 103.248469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.249096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:28:34 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x6, 0x2, 0x1, 0xffff, 0x16, "5136dcf4ab62e21c"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x1f, 0x1, 0x190, &(0x7f0000000140)}) r1 = socket$inet(0x2, 0x5, 0x8001) bind(r1, &(0x7f0000000580)=@hci={0x1f, 0x1}, 0x80) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000600)={0x9, 0x4, 0x1, 0x1}) io_cancel(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000640)="00ac6b9d342f3b53bdcb2419404a5bfb63f51b7fe9f752b71fda1da078417d24db44d7cc213e4f24fc8a0046ec05c6aaa26ee905c0e30762ac67a3f4ffbfe0a3756efffafec0763140c67fe7bed6ac3e4f28b45ddeec5dc98946e373d2f376fab5ff17749c956b01d94c439af26ce2e745e26d91d2bdb1986935b4e6fdcd74a2ea9207de74d1436a4a4ebe79dde94977de777547bbcb542cbee4c9791156249be434dddd7be801a408c010d66e30761ddef9c5a3c98134b727f79bd4117e44aabe01f5d1be586b3bef73a8aa8eadac4ac8f3229b14122d68b3d3525836fa3dcf5fd437b6337a70174fd8d8f9252bbfe970da4734ad", 0xf5, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x87, 0x8000, 0x40, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x68, 0x0, 0x40, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xf9, [@remote, @private=0xa010101, @multicast2, @loopback, @multicast2, @remote]}, @end, @noop, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xf, "854ed1b2e561ae21d08db007d4"}, {0x0, 0x10, "db455c65ee19f812dd709a8672a2"}]}, @lsrr={0x83, 0xb, 0x1c, [@remote, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x1b, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xb48a, 0x7fffffff, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xbf, [@loopback, @remote, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x8, [{@remote, 0x1}, {@multicast1, 0x4}, {@local, 0x7}]}, @end, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0x2, [{@empty, 0x4}, {@empty, 0x9}, {@remote, 0xcb}, {@broadcast, 0x8}, {@remote, 0x4}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0xaf}, {@broadcast, 0x2}, {@private=0xa010100, 0x200}]}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x7, [0x40]}, @timestamp_prespec={0x44, 0xc, 0x3a, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}]}, @rr={0x7, 0x7, 0xbb, [@local]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x9, [{@empty, 0x4}, {@empty, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x1, 0x8, 0x400, 0x101, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0x67, 0x1, [{0x6, 0xf, "eeff349767ae41a25a51de5b28"}, {0x6, 0x9, "8d3bd650e54dbd"}, {0x2, 0xf, "fbd89f7b9d4b9b5d8212e8c894"}, {0x2, 0x11, "37ca7ac88a0c214b1f338e9d233863"}, {0x7, 0xe, "9b33655d87d5e595fac25156"}, {0x2, 0xb, "c3a5dbc76da8fcb017"}, {0x0, 0x10, "3f3caedfe75dd5e57df7fc69ec1d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001180)={0x9b4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x39b9, 0x6, 0x4, 0x7}, {0x6000, 0x33, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9562}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x0, 0x81, 0xffffff7a}, {0x0, 0x7f, 0xa2, 0x1ff}, {0x1, 0x2, 0x6, 0x10}, {0x0, 0x3, 0x97, 0xfffffffb}, {0x5, 0x81, 0xea, 0xfffffc3a}, {0x7f, 0x0, 0x1, 0x7}, {0x16, 0xfb, 0xff, 0x1}, {0x9, 0x3, 0x6, 0xff}, {0x6, 0x5, 0x3, 0x8001}]}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xee}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x10}, 0x40880) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001bc0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001c00)={'tunl0\x00', r10, 0x8, 0x7, 0x10000, 0x0, {{0xf, 0x4, 0x1, 0x19, 0x3c, 0x67, 0x0, 0x1f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, {[@rr={0x7, 0x1f, 0xef, [@broadcast, @loopback, @remote, @empty, @private=0xa010100, @multicast2, @multicast2]}, @timestamp={0x44, 0x8, 0x54, 0x0, 0xe, [0xffffffff]}]}}}}}) 11:28:34 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x4770, &(0x7f0000000040)={0x0, 0x6ebe, 0x10, 0x3, 0x348, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x2b16, &(0x7f0000000140)={0x0, 0xc817, 0x1, 0x1, 0x24f}) r4 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x412040) r5 = socket$inet(0x2, 0x1, 0xcb) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[r2, r3, r4, r0, 0xffffffffffffffff, r5]}, 0x6) r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1000, 0x400) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/120, 0x78}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x1, 0x18, 0x11, 0x18f, &(0x7f00000003c0)}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000900)={&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000840)=""/162, 0xa2}) r7 = syz_io_uring_setup(0x231e, &(0x7f0000000940)={0x0, 0x8366, 0x2e, 0x3, 0x1a6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) write$cgroup_freezer_state(r0, &(0x7f0000000a40)='FROZEN\x00', 0x7) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x14050, r1, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000c00)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000ac0), &(0x7f0000000bc0)='./file0\x00', 0x800, 0x5000, 0x1}, 0x1000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xd) 11:28:34 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x6, 0x2, 0x1, 0xffff, 0x16, "5136dcf4ab62e21c"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x1f, 0x1, 0x190, &(0x7f0000000140)}) r1 = socket$inet(0x2, 0x5, 0x8001) bind(r1, &(0x7f0000000580)=@hci={0x1f, 0x1}, 0x80) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000600)={0x9, 0x4, 0x1, 0x1}) io_cancel(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000640)="00ac6b9d342f3b53bdcb2419404a5bfb63f51b7fe9f752b71fda1da078417d24db44d7cc213e4f24fc8a0046ec05c6aaa26ee905c0e30762ac67a3f4ffbfe0a3756efffafec0763140c67fe7bed6ac3e4f28b45ddeec5dc98946e373d2f376fab5ff17749c956b01d94c439af26ce2e745e26d91d2bdb1986935b4e6fdcd74a2ea9207de74d1436a4a4ebe79dde94977de777547bbcb542cbee4c9791156249be434dddd7be801a408c010d66e30761ddef9c5a3c98134b727f79bd4117e44aabe01f5d1be586b3bef73a8aa8eadac4ac8f3229b14122d68b3d3525836fa3dcf5fd437b6337a70174fd8d8f9252bbfe970da4734ad", 0xf5, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x87, 0x8000, 0x40, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x68, 0x0, 0x40, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xf9, [@remote, @private=0xa010101, @multicast2, @loopback, @multicast2, @remote]}, @end, @noop, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xf, "854ed1b2e561ae21d08db007d4"}, {0x0, 0x10, "db455c65ee19f812dd709a8672a2"}]}, @lsrr={0x83, 0xb, 0x1c, [@remote, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x1b, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xb48a, 0x7fffffff, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xbf, [@loopback, @remote, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x8, [{@remote, 0x1}, {@multicast1, 0x4}, {@local, 0x7}]}, @end, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0x2, [{@empty, 0x4}, {@empty, 0x9}, {@remote, 0xcb}, {@broadcast, 0x8}, {@remote, 0x4}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0xaf}, {@broadcast, 0x2}, {@private=0xa010100, 0x200}]}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x7, [0x40]}, @timestamp_prespec={0x44, 0xc, 0x3a, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}]}, @rr={0x7, 0x7, 0xbb, [@local]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x9, [{@empty, 0x4}, {@empty, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x1, 0x8, 0x400, 0x101, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0x67, 0x1, [{0x6, 0xf, "eeff349767ae41a25a51de5b28"}, {0x6, 0x9, "8d3bd650e54dbd"}, {0x2, 0xf, "fbd89f7b9d4b9b5d8212e8c894"}, {0x2, 0x11, "37ca7ac88a0c214b1f338e9d233863"}, {0x7, 0xe, "9b33655d87d5e595fac25156"}, {0x2, 0xb, "c3a5dbc76da8fcb017"}, {0x0, 0x10, "3f3caedfe75dd5e57df7fc69ec1d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001180)={0x9b4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x39b9, 0x6, 0x4, 0x7}, {0x6000, 0x33, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9562}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x0, 0x81, 0xffffff7a}, {0x0, 0x7f, 0xa2, 0x1ff}, {0x1, 0x2, 0x6, 0x10}, {0x0, 0x3, 0x97, 0xfffffffb}, {0x5, 0x81, 0xea, 0xfffffc3a}, {0x7f, 0x0, 0x1, 0x7}, {0x16, 0xfb, 0xff, 0x1}, {0x9, 0x3, 0x6, 0xff}, {0x6, 0x5, 0x3, 0x8001}]}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xee}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x10}, 0x40880) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001bc0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001c00)={'tunl0\x00', r10, 0x8, 0x7, 0x10000, 0x0, {{0xf, 0x4, 0x1, 0x19, 0x3c, 0x67, 0x0, 0x1f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, {[@rr={0x7, 0x1f, 0xef, [@broadcast, @loopback, @remote, @empty, @private=0xa010100, @multicast2, @multicast2]}, @timestamp={0x44, 0x8, 0x54, 0x0, 0xe, [0xffffffff]}]}}}}}) [ 103.394795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.395380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:28:34 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x6, 0x2, 0x1, 0xffff, 0x16, "5136dcf4ab62e21c"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x1f, 0x1, 0x190, &(0x7f0000000140)}) r1 = socket$inet(0x2, 0x5, 0x8001) bind(r1, &(0x7f0000000580)=@hci={0x1f, 0x1}, 0x80) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000600)={0x9, 0x4, 0x1, 0x1}) io_cancel(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000640)="00ac6b9d342f3b53bdcb2419404a5bfb63f51b7fe9f752b71fda1da078417d24db44d7cc213e4f24fc8a0046ec05c6aaa26ee905c0e30762ac67a3f4ffbfe0a3756efffafec0763140c67fe7bed6ac3e4f28b45ddeec5dc98946e373d2f376fab5ff17749c956b01d94c439af26ce2e745e26d91d2bdb1986935b4e6fdcd74a2ea9207de74d1436a4a4ebe79dde94977de777547bbcb542cbee4c9791156249be434dddd7be801a408c010d66e30761ddef9c5a3c98134b727f79bd4117e44aabe01f5d1be586b3bef73a8aa8eadac4ac8f3229b14122d68b3d3525836fa3dcf5fd437b6337a70174fd8d8f9252bbfe970da4734ad", 0xf5, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x87, 0x8000, 0x40, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x68, 0x0, 0x40, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xf9, [@remote, @private=0xa010101, @multicast2, @loopback, @multicast2, @remote]}, @end, @noop, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xf, "854ed1b2e561ae21d08db007d4"}, {0x0, 0x10, "db455c65ee19f812dd709a8672a2"}]}, @lsrr={0x83, 0xb, 0x1c, [@remote, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x1b, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xb48a, 0x7fffffff, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xbf, [@loopback, @remote, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x8, [{@remote, 0x1}, {@multicast1, 0x4}, {@local, 0x7}]}, @end, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0x2, [{@empty, 0x4}, {@empty, 0x9}, {@remote, 0xcb}, {@broadcast, 0x8}, {@remote, 0x4}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0xaf}, {@broadcast, 0x2}, {@private=0xa010100, 0x200}]}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x7, [0x40]}, @timestamp_prespec={0x44, 0xc, 0x3a, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}]}, @rr={0x7, 0x7, 0xbb, [@local]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x9, [{@empty, 0x4}, {@empty, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x1, 0x8, 0x400, 0x101, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0x67, 0x1, [{0x6, 0xf, "eeff349767ae41a25a51de5b28"}, {0x6, 0x9, "8d3bd650e54dbd"}, {0x2, 0xf, "fbd89f7b9d4b9b5d8212e8c894"}, {0x2, 0x11, "37ca7ac88a0c214b1f338e9d233863"}, {0x7, 0xe, "9b33655d87d5e595fac25156"}, {0x2, 0xb, "c3a5dbc76da8fcb017"}, {0x0, 0x10, "3f3caedfe75dd5e57df7fc69ec1d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001180)={0x9b4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x39b9, 0x6, 0x4, 0x7}, {0x6000, 0x33, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9562}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x0, 0x81, 0xffffff7a}, {0x0, 0x7f, 0xa2, 0x1ff}, {0x1, 0x2, 0x6, 0x10}, {0x0, 0x3, 0x97, 0xfffffffb}, {0x5, 0x81, 0xea, 0xfffffc3a}, {0x7f, 0x0, 0x1, 0x7}, {0x16, 0xfb, 0xff, 0x1}, {0x9, 0x3, 0x6, 0xff}, {0x6, 0x5, 0x3, 0x8001}]}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xee}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x10}, 0x40880) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001bc0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001c80)={'ip_vti0\x00', &(0x7f0000001c00)={'tunl0\x00', r10, 0x8, 0x7, 0x10000, 0x0, {{0xf, 0x4, 0x1, 0x19, 0x3c, 0x67, 0x0, 0x1f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, {[@rr={0x7, 0x1f, 0xef, [@broadcast, @loopback, @remote, @empty, @private=0xa010100, @multicast2, @multicast2]}, @timestamp={0x44, 0x8, 0x54, 0x0, 0xe, [0xffffffff]}]}}}}}) 11:28:35 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x800) r1 = syz_io_uring_setup(0x4770, &(0x7f0000000040)={0x0, 0x6ebe, 0x10, 0x3, 0x348, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x2b16, &(0x7f0000000140)={0x0, 0xc817, 0x1, 0x1, 0x24f}) r4 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x412040) r5 = socket$inet(0x2, 0x1, 0xcb) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[r2, r3, r4, r0, 0xffffffffffffffff, r5]}, 0x6) r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1000, 0x400) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/120, 0x78}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x1, 0x18, 0x11, 0x18f, &(0x7f00000003c0)}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000900)={&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000840)=""/162, 0xa2}) r7 = syz_io_uring_setup(0x231e, &(0x7f0000000940)={0x0, 0x8366, 0x2e, 0x3, 0x1a6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x1) write$cgroup_freezer_state(r0, &(0x7f0000000a40)='FROZEN\x00', 0x7) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x14050, r1, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000c00)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000ac0), &(0x7f0000000bc0)='./file0\x00', 0x800, 0x5000, 0x1}, 0x1000) 11:28:35 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x6, 0x2, 0x1, 0xffff, 0x16, "5136dcf4ab62e21c"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x1f, 0x1, 0x190, &(0x7f0000000140)}) r1 = socket$inet(0x2, 0x5, 0x8001) bind(r1, &(0x7f0000000580)=@hci={0x1f, 0x1}, 0x80) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000600)={0x9, 0x4, 0x1, 0x1}) io_cancel(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x9, r1, &(0x7f0000000640)="00ac6b9d342f3b53bdcb2419404a5bfb63f51b7fe9f752b71fda1da078417d24db44d7cc213e4f24fc8a0046ec05c6aaa26ee905c0e30762ac67a3f4ffbfe0a3756efffafec0763140c67fe7bed6ac3e4f28b45ddeec5dc98946e373d2f376fab5ff17749c956b01d94c439af26ce2e745e26d91d2bdb1986935b4e6fdcd74a2ea9207de74d1436a4a4ebe79dde94977de777547bbcb542cbee4c9791156249be434dddd7be801a408c010d66e30761ddef9c5a3c98134b727f79bd4117e44aabe01f5d1be586b3bef73a8aa8eadac4ac8f3229b14122d68b3d3525836fa3dcf5fd437b6337a70174fd8d8f9252bbfe970da4734ad", 0xf5, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x87, 0x8000, 0x40, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x68, 0x0, 0x40, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x1b, 0xf9, [@remote, @private=0xa010101, @multicast2, @loopback, @multicast2, @remote]}, @end, @noop, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xf, "854ed1b2e561ae21d08db007d4"}, {0x0, 0x10, "db455c65ee19f812dd709a8672a2"}]}, @lsrr={0x83, 0xb, 0x1c, [@remote, @dev={0xac, 0x14, 0x14, 0x2f}]}, @rr={0x7, 0x1b, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xb48a, 0x7fffffff, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xbf, [@loopback, @remote, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x8, [{@remote, 0x1}, {@multicast1, 0x4}, {@local, 0x7}]}, @end, @timestamp_addr={0x44, 0x4c, 0xc4, 0x1, 0x2, [{@empty, 0x4}, {@empty, 0x9}, {@remote, 0xcb}, {@broadcast, 0x8}, {@remote, 0x4}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0xaf}, {@broadcast, 0x2}, {@private=0xa010100, 0x200}]}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x7, [0x40]}, @timestamp_prespec={0x44, 0xc, 0x3a, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}]}, @rr={0x7, 0x7, 0xbb, [@local]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x9, [{@empty, 0x4}, {@empty, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0x1, 0x8, 0x400, 0x101, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x67, 0x0, 0x81, 0x2f, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0x67, 0x1, [{0x6, 0xf, "eeff349767ae41a25a51de5b28"}, {0x6, 0x9, "8d3bd650e54dbd"}, {0x2, 0xf, "fbd89f7b9d4b9b5d8212e8c894"}, {0x2, 0x11, "37ca7ac88a0c214b1f338e9d233863"}, {0x7, 0xe, "9b33655d87d5e595fac25156"}, {0x2, 0xb, "c3a5dbc76da8fcb017"}, {0x0, 0x10, "3f3caedfe75dd5e57df7fc69ec1d"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001180)={0x9b4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x39b9, 0x6, 0x4, 0x7}, {0x6000, 0x33, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9562}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x0, 0x81, 0xffffff7a}, {0x0, 0x7f, 0xa2, 0x1ff}, {0x1, 0x2, 0x6, 0x10}, {0x0, 0x3, 0x97, 0xfffffffb}, {0x5, 0x81, 0xea, 0xfffffc3a}, {0x7f, 0x0, 0x1, 0x7}, {0x16, 0xfb, 0xff, 0x1}, {0x9, 0x3, 0x6, 0xff}, {0x6, 0x5, 0x3, 0x8001}]}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xee}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x10}, 0x40880) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001bc0)={'wg2\x00'}) [ 103.482919] [ 103.483091] ===================================== [ 103.483453] WARNING: bad unlock balance detected! [ 103.483884] 6.19.0-rc5-next-20260113 #1 Not tainted [ 103.484316] ------------------------------------- [ 103.484729] syz-executor.1/3926 is trying to release lock (rcu_read_lock) at: [ 103.485907] [] __wait_on_freeing_inode+0x105/0x350 [ 103.486913] but there are no more locks to release! [ 103.487721] [ 103.487721] other info that might help us debug this: [ 103.488663] 4 locks held by syz-executor.1/3926: [ 103.489419] #0: ffff88800f9723f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 103.490640] #1: ffff8880288ed020 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 103.492019] #2: ffff88800f976950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 103.493717] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 103.495021] [ 103.495021] stack backtrace: [ 103.495682] CPU: 1 UID: 0 PID: 3926 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 103.495697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 103.495705] Call Trace: [ 103.495709] [ 103.495713] dump_stack_lvl+0xca/0x120 [ 103.495744] ? __wait_on_freeing_inode+0x105/0x350 [ 103.495758] print_unlock_imbalance_bug+0x118/0x130 [ 103.495774] ? __wait_on_freeing_inode+0x105/0x350 [ 103.495789] lock_release+0x1ee/0x270 [ 103.495804] __wait_on_freeing_inode+0x10a/0x350 [ 103.495819] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 103.495835] ? __pfx_var_wake_function+0x10/0x10 [ 103.495853] ? lock_is_held_type+0x9e/0x120 [ 103.495864] insert_inode_locked+0x25f/0x890 [ 103.495882] __ext4_new_inode+0x223d/0x4cd0 [ 103.495900] ? __pfx___ext4_new_inode+0x10/0x10 [ 103.495914] ? __pfx___dquot_initialize+0x10/0x10 [ 103.495933] ? __pfx_avc_has_perm+0x10/0x10 [ 103.495949] ext4_symlink+0x406/0xb40 [ 103.495969] ? __pfx_ext4_symlink+0x10/0x10 [ 103.495985] ? security_inode_permission+0x72/0xe0 [ 103.495998] vfs_symlink+0x44b/0x840 [ 103.496015] do_symlinkat+0x153/0x440 [ 103.496029] ? __pfx_do_symlinkat+0x10/0x10 [ 103.496042] ? strncpy_from_user+0x21b/0x2f0 [ 103.496060] __x64_sys_symlink+0x79/0xa0 [ 103.496073] do_syscall_64+0xbf/0x420 [ 103.496087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.496099] RIP: 0033:0x7f0bfc7bb427 [ 103.496108] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 103.496119] RSP: 002b:00007ffe236f7738 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 103.496130] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0bfc7bb427 [ 103.496137] RDX: 00007ffe236f7813 RSI: 00007f0bfc816022 RDI: 00007ffe236f7800 [ 103.496144] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe236f75d0 [ 103.496151] R10: 00007ffe236f7487 R11: 0000000000000202 R12: 0000000000000001 [ 103.496158] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe236f7800 [ 103.496169] [ 103.512554] ------------[ cut here ]------------ [ 103.512930] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.1/3926 [ 103.513848] Modules linked in: [ 103.514148] CPU: 1 UID: 0 PID: 3926 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 103.514988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 103.515690] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 103.516251] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 103.517931] RSP: 0018:ffff8880475b79a0 EFLAGS: 00010286 [ 103.518454] RAX: 00000000ffffffff RBX: ffff8880475cb700 RCX: ffffffff815664c7 [ 103.519089] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff8880475cbafc [ 103.519782] RBP: ffff8880475cb700 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 103.520467] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880475cb700 [ 103.521105] R13: 0000000000000001 R14: ffffffff85c0f540 R15: ffff88801ae74f58 [ 103.521791] FS: 000055558ab5f400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 103.522552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.523073] CR2: 000055558ab5f708 CR3: 00000000446d6000 CR4: 0000000000350ef0 [ 103.523761] Call Trace: [ 103.524033] [ 103.524712] __wait_on_freeing_inode+0x10f/0x350 [ 103.525464] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 103.526554] ? __pfx_var_wake_function+0x10/0x10 [ 103.527778] ? lock_is_held_type+0x9e/0x120 [ 103.528864] insert_inode_locked+0x25f/0x890 [ 103.530530] __ext4_new_inode+0x223d/0x4cd0 [ 103.532898] ? __pfx___ext4_new_inode+0x10/0x10 [ 103.534123] ? __pfx___dquot_initialize+0x10/0x10 [ 103.534919] ? __pfx_avc_has_perm+0x10/0x10 [ 103.536654] ext4_symlink+0x406/0xb40 [ 103.538807] ? __pfx_ext4_symlink+0x10/0x10 [ 103.539822] ? security_inode_permission+0x72/0xe0 [ 103.541454] vfs_symlink+0x44b/0x840 [ 103.542710] do_symlinkat+0x153/0x440 [ 103.543795] ? __pfx_do_symlinkat+0x10/0x10 [ 103.544553] ? strncpy_from_user+0x21b/0x2f0 [ 103.546385] __x64_sys_symlink+0x79/0xa0 [ 103.547105] do_syscall_64+0xbf/0x420 [ 103.547926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.548534] RIP: 0033:0x7f0bfc7bb427 [ 103.548925] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 103.550607] RSP: 002b:00007ffe236f7738 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 103.551327] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0bfc7bb427 [ 103.551965] RDX: 00007ffe236f7813 RSI: 00007f0bfc816022 RDI: 00007ffe236f7800 [ 103.552644] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe236f75d0 [ 103.553345] R10: 00007ffe236f7487 R11: 0000000000000202 R12: 0000000000000001 [ 103.553977] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe236f7800 [ 103.556530] [ 103.556747] irq event stamp: 297 [ 103.557048] hardirqs last enabled at (297): [] irqentry_exit+0x17b/0x650 [ 103.557916] hardirqs last disabled at (296): [] sysvec_call_function_single+0x18/0xc0 [ 103.558893] softirqs last enabled at (290): [] kernel_fpu_end+0x59/0x70 [ 103.559739] softirqs last disabled at (288): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 103.560675] ---[ end trace 0000000000000000 ]--- [ 103.564318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.564976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.589809] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 103.708422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.709117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 VM DIAGNOSIS: 11:28:35 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f2b7b18 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11001e56f64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f2b7b50 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555567188400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7edad0018 CR3=000000002045e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc7edaa37c000007fc7edaa37c8 XMM02=00007fc7edaa37e000007fc7edaa37c0 XMM03=00007fc7edaa37c800007fc7edaa37c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10016a8046 R10=0000000000000020 R11=652d7a7973205043 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558ab5f400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558ab5f708 CR3=00000000446d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000