Warning: Permanently added '[localhost]:4426' (ECDSA) to the list of known hosts. 2025/01/20 23:58:31 fuzzer started 2025/01/20 23:58:31 dialing manager at localhost:44833 syzkaller login: [ 62.698196] cgroup: Unknown subsys name 'net' [ 62.810840] cgroup: Unknown subsys name 'cpuset' [ 62.840053] cgroup: Unknown subsys name 'rlimit' [ 70.342359] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 82.032469] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 23:58:51 syscalls: 2217 2025/01/20 23:58:51 code coverage: enabled 2025/01/20 23:58:51 comparison tracing: enabled 2025/01/20 23:58:51 extra coverage: enabled 2025/01/20 23:58:51 setuid sandbox: enabled 2025/01/20 23:58:51 namespace sandbox: enabled 2025/01/20 23:58:51 Android sandbox: enabled 2025/01/20 23:58:51 fault injection: enabled 2025/01/20 23:58:51 leak checking: enabled 2025/01/20 23:58:51 net packet injection: enabled 2025/01/20 23:58:51 net device setup: enabled 2025/01/20 23:58:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 23:58:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 23:58:51 USB emulation: enabled 2025/01/20 23:58:51 hci packet injection: enabled 2025/01/20 23:58:51 wifi device emulation: enabled 2025/01/20 23:58:51 802.15.4 emulation: enabled 2025/01/20 23:58:51 fetching corpus: 1, signal 584/2533 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/4477 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/6404 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/8336 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/10271 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/12206 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/14140 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/16077 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/18010 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/18240 (executing program) 2025/01/20 23:58:51 fetching corpus: 1, signal 584/18240 (executing program) 2025/01/20 23:58:54 starting 8 fuzzer processes 23:58:54 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x3, 0x53}, 0x100, './file0\x00'}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x2c0080, 0x0) ioctl$FIOCLEX(r1, 0x5451) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000280)={{r2}, "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"}) r3 = dup2(r1, r0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r4 = syz_open_dev$vcsu(&(0x7f0000001380), 0x0, 0x181000) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000013c0)) socketpair(0x29, 0x6, 0x5, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x400d0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001580)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f00000015c0)={'filter\x00', 0x7c, "909872e2766841df7537066a2e74f6df1b1221688e08ee4d914ec8673a596cc05fda9fcced43fa7b19e22c057b09cc69c4502380eda179cab1b90ecf62bee388ff3c4d929dce0426a7b0d1255fd400317175bab590129af4394634d79e8d86e3b2596fb2e65985d68cf640f64680e821e486860d15ac87df50177596"}, &(0x7f0000001680)=0xa0) recvmmsg$unix(r7, &(0x7f0000003480)=[{{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000001740), 0x0, &(0x7f0000001780)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000001900)=""/241, 0xf1}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/246, 0xf6}, {&(0x7f0000001b80)=""/90, 0x5a}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/175, 0xaf}], 0x6, &(0x7f0000002d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002e00)=""/250, 0xfa}, {&(0x7f0000002f00)=""/71, 0x47}, {&(0x7f0000002f80)=""/19, 0x13}, {&(0x7f0000002fc0)=""/158, 0x9e}, {&(0x7f0000003080)=""/181, 0xb5}, {&(0x7f0000003140)=""/159, 0x9f}, {&(0x7f0000003200)=""/129, 0x81}, {&(0x7f00000032c0)=""/59, 0x3b}], 0x8, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x3, 0x40002040, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r8, 0xc0104811, &(0x7f0000003540)={0x1, 0x0, 0x3e, 0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000035c0)) 23:58:54 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl0\x00', r7, 0x2f, 0x2, 0x58, 0x2, 0x28, @loopback, @mcast2, 0x8, 0x10, 0x5, 0x1000}}) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000002b40)={'ip6_vti0\x00', &(0x7f0000002ac0)={'ip6gre0\x00', r9, 0x4, 0x5, 0x9, 0x100, 0x12, @rand_addr=' \x01\x00', @private1, 0x10, 0x1, 0xfffffffd, 0x3}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 23:58:54 executing program 2: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000040)={{}, 0x4, &(0x7f0000000000)=[0x20, 0x8, 0x6a, 0x100], 0x1, 0x7, [0x7, 0x6, 0x6, 0x10000]}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0xffffffffffffffff, r2, 0xee01}, 0xc) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) r4 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x9, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="165b74ec03c10d2961283aa3a719e6e796d6c1cbfa9d056ee357bde6a52810697bb6a5a56749fd4657a1e668f32055ded426c5a60b7646e79fdccd782b94a833c6a8a46802948f81f5db965f1fd5abb7659d01", 0x53, 0x1}], 0x100001, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r2}}, {@utf8}, {@check_strict}, {@nocompress}, {@gid={'gid', 0x3d, r3}}, {@nocompress}, {@unhide}], [{@fowner_lt={'fowner<', r2}}, {@obj_type}, {@subj_type={'subj_type', 0x3d, 'y\x00'}}, {@subj_type={'subj_type', 0x3d, '\\\\[('}}]}) openat2(r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x80102, 0x20, 0x6}, 0x18) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000480)={0x0, 0x8959}) pivot_root(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00') setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001500)={0x1, 0x9}, 0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/meminfo\x00', 0x0, 0x0) ioctl$CDROMREADTOCHDR(r5, 0x5305, &(0x7f0000001580)={0x4, 0x8c}) r6 = accept(r1, &(0x7f00000015c0)=@nfc, &(0x7f0000001640)=0x80) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001680)={r6, 0x2, 0x71b8, 0x9}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000016c0), 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000001700)={0x80002002}) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000001740)={'\x00', 0x5, 0x0, 0x7}) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000017c0)={0x1, 0x5}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xa4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44044}, 0x40800) 23:58:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"62be71cade6e1907e193d98d9294435e", 0x0, 0x0, {0x306, 0x10000}, {0x7, 0x7f}, 0x7, [0x2, 0x2, 0xb6b1, 0x2, 0x8, 0x80000000, 0x47, 0x0, 0xff, 0x3, 0xffffffffffffffff, 0x81, 0x9, 0x2, 0x8, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000001c0)={{}, r1, 0x0, @inherit={0x50, &(0x7f0000000140)={0x1, 0x1, 0x49, 0xff, {0x9, 0x1, 0x8, 0x6, 0x4}, [0x200]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffff7}}, './file0\x00'}) readahead(r0, 0x100, 0x5) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001200)=0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000001240)={r3, 0x0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001300)={r4, 0x2, r2, 0x5}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r5, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001380)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x2080, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c884}, 0x20008804) syz_io_uring_setup(0x1997, &(0x7f0000001540)={0x0, 0x9044, 0x2, 0x1, 0xdb, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000015c0), &(0x7f0000001600)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000001640)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0xc0, 0x0, 0x8, 0x0, 0x0, {0x0, r9}}, 0xb395) r10 = memfd_secret(0x4f326237802db1e7) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0, {0x4, 0x2}}, './file0\x00'}) 23:58:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x80000001) r1 = io_uring_setup(0x200, &(0x7f0000000080)={0x0, 0x55a1, 0x2, 0x3, 0x346, 0x0, r0}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/137) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000200)=""/74) fcntl$setsig(r0, 0xa, 0x1a) write$P9_RUNLINKAT(r0, &(0x7f0000000280)={0x7, 0x4d, 0x2}, 0x7) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000002c0)={0x14, 0x1, {0x6, @usage=0x8b7, 0x0, 0xfffffffffffffffe, 0xa8, 0xfff, 0x4, 0x20, 0x5454c410e3778078, @usage=0xe03, 0x0, 0x6, [0x1, 0xe21, 0x25, 0x6, 0x80000000]}, {0x0, @usage=0x80000001, 0x0, 0x8, 0x3f, 0x1, 0x70cbbd36, 0xff, 0x10, @usage=0x8000, 0x5d78, 0x2, [0x0, 0x4, 0x80000001, 0x6, 0x6, 0x8fc]}, {0x3, @struct={0x1ff, 0xfffffffc}, 0x0, 0x2, 0x40, 0x7, 0xff, 0x9, 0x5, @usage=0x8000, 0x4, 0x5, [0xffffffff, 0x1, 0x3, 0x10001, 0xa7e, 0x101]}, {0xffffffff80000001, 0xb1, 0xb}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4801) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000700)=0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RREADLINK(r0, &(0x7f0000000980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000009c0)=0x10) splice(r2, &(0x7f0000000a00)=0x4, r0, &(0x7f0000000a40)=0x2, 0x7, 0xbc3b0b599b189c9a) r3 = syz_open_procfs(0x0, &(0x7f0000000a80)='net/raw\x00') connect$netlink(r3, &(0x7f0000000ac0)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc) r4 = accept4$inet6(r2, &(0x7f0000000b00)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000b40)=0x1c, 0x800) getsockname(r4, &(0x7f0000000b80)=@x25={0x9, @remote}, &(0x7f0000000c00)=0x80) io_uring_enter(r3, 0x1086, 0x57eb, 0x1, &(0x7f0000000c40)={[0x5]}, 0x8) [ 85.710664] audit: type=1400 audit(1737417534.728:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:58:54 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x5, 0x10000050, 0x5, 0x7, 0xeb3, 0xb399, 0x1f, 0x8, 0xaf0}, 0x0) sched_getattr(0xffffffffffffffff, &(0x7f0000000100)={0x38}, 0x38, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xee, 0x40, 0x6, 0xad, 0x6, 0x2, 0x3e, 0x2, 0x1e1, 0x40, 0x12a, 0x7, 0x5, 0x38, 0x1, 0x10, 0x8000, 0x509}, [{0x6474e554, 0xffffffff, 0x0, 0x7, 0x7, 0x400, 0x0, 0xfffffffffffffffe}, {0x5, 0x3ff, 0x6, 0x4, 0x9, 0x9, 0xffffffffffffff01, 0xf50}], "2341f83003d2984e1f9b29920f79779ebb5c0583dbc2f91d45783557c9a8410ca8c8d9e54e6a8e183b16828af4380d655d6cdf568eeedf03e4474f8ceb25e747f45ce56f9deb832c6ac22f0c01af5adf5973891bcac2f0433d18387d4452381cdae1", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x612) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000007c0)={0x0, 0x5, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000bc0)=0x0) sched_setattr(r2, &(0x7f0000000c00)={0x38, 0x6, 0x34, 0x4, 0x800, 0x1, 0x12, 0x0, 0x3, 0x5}, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000c40), &(0x7f0000000c80)={'L-', 0x8}, 0x16, 0x4) fsetxattr$security_evm(r1, &(0x7f0000000cc0), &(0x7f0000000d00)=@md5={0x1, "19f32eb6e8987a3ea99789c60b02c06b"}, 0x11, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000d40)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x40, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000dc0)=0x1f) sched_setattr(r0, &(0x7f0000000e00)={0x38, 0x1, 0x10, 0x4, 0xf6cf, 0xaa0, 0x40000000000000, 0x118, 0x7, 0x7}, 0x0) fchmod(r1, 0x92) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xbc, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8d4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x109}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x111}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x8040) sched_getattr(0x0, &(0x7f0000001040)={0x38}, 0x38, 0x0) 23:58:54 executing program 6: ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, &(0x7f0000000000)=""/50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000080)={0x23, 0x7, 0x7fff}) r1 = shmget(0x2, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/89, 0x59}], 0x4, &(0x7f00000004c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/54, 0x36}, {&(0x7f0000000680)=""/62, 0x3e}, {&(0x7f00000006c0)=""/41, 0x29}], 0x3, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000007c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/124, 0x7c}], 0x1}}], 0x3, 0x10103, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000a40)=""/156, 0x9c}, {&(0x7f0000000b00)=""/9, 0x9}, {&(0x7f0000000b40)=""/73, 0x49}, {&(0x7f0000000bc0)=""/141, 0x8d}, {&(0x7f0000000c80)=""/224, 0xe0}, {&(0x7f0000000d80)=""/117, 0x75}, {&(0x7f0000000e00)=""/104, 0x68}], 0x7, &(0x7f0000000f00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xc0}, 0x20) shmctl$IPC_SET(r1, 0x1, &(0x7f0000001000)={{0x2, r6, 0xee01, r11, 0xee00, 0x8, 0x4}, 0xff, 0x2000000000, 0x6, 0x8f3, r0, r0, 0x4}) r12 = syz_open_procfs(r10, &(0x7f0000001080)='net/ip_mr_vif\x00') ioctl$AUTOFS_IOC_READY(r12, 0x9360, 0x1) write$binfmt_elf32(r7, &(0x7f00000010c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xff, 0x9, 0x0, 0x5, 0x3, 0x3, 0xd88, 0x1fb, 0x38, 0x1c5, 0x0, 0x5, 0x20, 0x1, 0x0, 0x8, 0xd9dd}, [{0x1, 0x1f, 0x5, 0x9, 0x3, 0x8, 0x1, 0x3}, {0x6, 0x9995, 0x0, 0xfffff000, 0x80, 0xd6, 0x7, 0x40}], "dc84cd59a4d62a9d90f8b149c1adeabc5ed695410b972e3737d47605a053e8cea5a62472ac002a7b45cded83077e1a7fd6c5e888bfeb64ffaa8ca89335883a52ab8201a39ab35899a70a1731ebb0565c484793020198de3dfbe46e70a3117fd6ef574c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xadb) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r13, 0x80086601, &(0x7f0000001c00)) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r14, 0x89a1, &(0x7f0000001c40)='bond0\x00') setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000001c80)={0x0, 0xa9}, 0x8) ptrace$setregs(0xffffffffffffffff, r5, 0xea4a, &(0x7f0000001cc0)="87a6c93a9ae83536538dac198f1b4add80d208a67e4ecfb2a8046d159eeacff3701c1a7a8d3a05d9fb2d7e46ac2ddb0f80f8db9a38e3801fe875aab0e778709ec8da0774e68edcd4c33557315ef7ce9d9130a1a6be1c3f5dd951f05f716e6102ddbb31dffff5c9cba219f5ed43a389b66bddc4d1367ab1ac5efeca4c8e1ff0a5eca897975cc75f8dbb4cfab67203f797d89a") r15 = fcntl$getown(r3, 0x9) write$cgroup_pid(r9, &(0x7f0000001d80)=r15, 0x12) ptrace$getsig(0x4202, r5, 0x9, &(0x7f0000001dc0)) rt_tgsigqueueinfo(0x0, r10, 0x13, &(0x7f0000001e80)={0x9, 0x5, 0x3a29e075}) 23:58:54 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80, 0x20000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x4, 0x1, 0x3f, 0x3ff, 0x60, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x8, 0x40, 0x9, 0x40}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf0, r2, 0x110, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000855) r4 = syz_open_dev$rtc(&(0x7f0000000440), 0x6, 0x1210c2) write$binfmt_misc(r4, &(0x7f0000000480)={'syz1', "5d4d182722e9e387b416216db281918f91a24bf830fe10bd40fb490b6d22619a727e6a0b06a7f6ea0b503627bc276d24212f391691aec63064a0d7ce69f584ce3695e2380fea2423e3e65d31c088b67323476836fc35761b6b7a0102785b7c9d3b3598b8d865f81baafe8480afcec2c1fc0ee76f76ebb4662c8f1e449ca52147f7c493c62a90823e6f32458a633bbdd9"}, 0x94) ioctl$RTC_PIE_ON(r0, 0x7005) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004014) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000640)={0xffffffffffffffff, 0x9, 0x7, 0x2}) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x101, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000700), r5) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r7, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048844}, 0x4000001) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0xbb, 0x5be, 0x200}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040044}, 0x4805) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000900)={0xaa26, 0x200}) r8 = fsmount(r0, 0x0, 0x1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd0, r9, 0x324, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2b50}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x12}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) [ 86.917595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.919745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.921759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.927344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.930008] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.932582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.097596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.103751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.115634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.140683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.150570] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.164994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.167005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.168747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.174344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.177857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.179976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.182193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.184533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.187834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.192720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.200196] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.203923] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.205897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.257898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.260542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.264123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.271659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.277519] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.280133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.296162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.298025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.299104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.302836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.307676] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.308808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.322764] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.324205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.325264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.326537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.333497] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.336170] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.337084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.360716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.381480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.394733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.401894] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.405607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.003842] Bluetooth: hci0: command tx timeout [ 89.259850] Bluetooth: hci3: command tx timeout [ 89.259922] Bluetooth: hci1: command tx timeout [ 89.322664] Bluetooth: hci2: command tx timeout [ 89.387871] Bluetooth: hci5: command tx timeout [ 89.387908] Bluetooth: hci7: command tx timeout [ 89.388407] Bluetooth: hci4: command tx timeout [ 89.450427] Bluetooth: hci6: command tx timeout [ 91.050343] Bluetooth: hci0: command tx timeout [ 91.306339] Bluetooth: hci1: command tx timeout [ 91.306461] Bluetooth: hci3: command tx timeout [ 91.371160] Bluetooth: hci2: command tx timeout [ 91.434483] Bluetooth: hci7: command tx timeout [ 91.435614] Bluetooth: hci5: command tx timeout [ 91.436335] Bluetooth: hci4: command tx timeout [ 91.498384] Bluetooth: hci6: command tx timeout [ 93.098438] Bluetooth: hci0: command tx timeout [ 93.355315] Bluetooth: hci3: command tx timeout [ 93.355487] Bluetooth: hci1: command tx timeout [ 93.418806] Bluetooth: hci2: command tx timeout [ 93.482538] Bluetooth: hci5: command tx timeout [ 93.482897] Bluetooth: hci4: command tx timeout [ 93.483329] Bluetooth: hci7: command tx timeout [ 93.546425] Bluetooth: hci6: command tx timeout [ 95.148651] Bluetooth: hci0: command tx timeout [ 95.402452] Bluetooth: hci1: command tx timeout [ 95.402623] Bluetooth: hci3: command tx timeout [ 95.466383] Bluetooth: hci2: command tx timeout [ 95.530605] Bluetooth: hci7: command tx timeout [ 95.530918] Bluetooth: hci5: command tx timeout [ 95.531015] Bluetooth: hci4: command tx timeout [ 95.595321] Bluetooth: hci6: command tx timeout [ 150.715374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.716120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.718706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.721694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.721781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.726624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.729563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.731484] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.733592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.733986] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.737323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.742391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.745869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.752472] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.770639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.770901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.782676] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.785055] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.841861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.847628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.854681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.857974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.859096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.859746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.864451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.866588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.871801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.884799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.887828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.888116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.893484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.893792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.894406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.894557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.897452] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.898869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.915127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.927824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.947529] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.962924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.966472] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.969560] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.994841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.001877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.022937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.049336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.057640] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.058142] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.811292] Bluetooth: hci0: command tx timeout [ 152.875302] Bluetooth: hci2: command tx timeout [ 152.875650] Bluetooth: hci1: command tx timeout [ 152.938350] Bluetooth: hci5: command tx timeout [ 152.941269] Bluetooth: hci4: command tx timeout [ 153.003286] Bluetooth: hci3: command tx timeout [ 153.066466] Bluetooth: hci6: command tx timeout [ 153.130389] Bluetooth: hci7: command tx timeout [ 154.858294] Bluetooth: hci0: command tx timeout [ 154.922369] Bluetooth: hci1: command tx timeout [ 154.922466] Bluetooth: hci2: command tx timeout [ 154.987336] Bluetooth: hci4: command tx timeout [ 154.988034] Bluetooth: hci5: command tx timeout [ 155.050320] Bluetooth: hci3: command tx timeout [ 155.114474] Bluetooth: hci6: command tx timeout [ 155.178359] Bluetooth: hci7: command tx timeout [ 156.906308] Bluetooth: hci0: command tx timeout [ 156.970703] Bluetooth: hci1: command tx timeout [ 156.970795] Bluetooth: hci2: command tx timeout [ 157.034316] Bluetooth: hci5: command tx timeout [ 157.034407] Bluetooth: hci4: command tx timeout [ 157.098857] Bluetooth: hci3: command tx timeout [ 157.164240] Bluetooth: hci6: command tx timeout [ 157.226638] Bluetooth: hci7: command tx timeout [ 158.954291] Bluetooth: hci0: command tx timeout [ 159.018423] Bluetooth: hci2: command tx timeout [ 159.018523] Bluetooth: hci1: command tx timeout [ 159.084254] Bluetooth: hci4: command tx timeout [ 159.084346] Bluetooth: hci5: command tx timeout [ 159.146277] Bluetooth: hci3: command tx timeout [ 159.211347] Bluetooth: hci6: command tx timeout [ 159.274434] Bluetooth: hci7: command tx timeout [ 206.722739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.722859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.036249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.036328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.491805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.491888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.623706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.623788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:00:57 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl0\x00', r7, 0x2f, 0x2, 0x58, 0x2, 0x28, @loopback, @mcast2, 0x8, 0x10, 0x5, 0x1000}}) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000002b40)={'ip6_vti0\x00', &(0x7f0000002ac0)={'ip6gre0\x00', r9, 0x4, 0x5, 0x9, 0x100, 0x12, @rand_addr=' \x01\x00', @private1, 0x10, 0x1, 0xfffffffd, 0x3}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 00:00:57 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl0\x00', r7, 0x2f, 0x2, 0x58, 0x2, 0x28, @loopback, @mcast2, 0x8, 0x10, 0x5, 0x1000}}) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000002b40)={'ip6_vti0\x00', &(0x7f0000002ac0)={'ip6gre0\x00', r9, 0x4, 0x5, 0x9, 0x100, 0x12, @rand_addr=' \x01\x00', @private1, 0x10, 0x1, 0xfffffffd, 0x3}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) [ 208.959411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.959491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:00:58 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl0\x00', r7, 0x2f, 0x2, 0x58, 0x2, 0x28, @loopback, @mcast2, 0x8, 0x10, 0x5, 0x1000}}) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000002b40)={'ip6_vti0\x00', &(0x7f0000002ac0)={'ip6gre0\x00', r9, 0x4, 0x5, 0x9, 0x100, 0x12, @rand_addr=' \x01\x00', @private1, 0x10, 0x1, 0xfffffffd, 0x3}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) [ 209.231627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.231715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:00:58 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl0\x00', r7, 0x2f, 0x2, 0x58, 0x2, 0x28, @loopback, @mcast2, 0x8, 0x10, 0x5, 0x1000}}) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000002b40)={'ip6_vti0\x00', &(0x7f0000002ac0)={'ip6gre0\x00', r9, 0x4, 0x5, 0x9, 0x100, 0x12, @rand_addr=' \x01\x00', @private1, 0x10, 0x1, 0xfffffffd, 0x3}}) 00:00:58 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl0\x00', r7, 0x2f, 0x2, 0x58, 0x2, 0x28, @loopback, @mcast2, 0x8, 0x10, 0x5, 0x1000}}) pipe(&(0x7f0000002a80)) 00:00:58 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001700)={'syztnl0\x00', r7, 0x2f, 0x2, 0x58, 0x2, 0x28, @loopback, @mcast2, 0x8, 0x10, 0x5, 0x1000}}) [ 209.597963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.598042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:00:58 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7619e4e3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x24044810) 00:00:58 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x20, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x40, 0x7, 0xffff0001}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9, 0x5, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8000, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x37, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x5, 0xffffd842}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1f, 0x2, 0x47, @mcast1, @local, 0x80, 0x1, 0x1, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000001040)={&(0x7f0000000740)={0x8e8, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x2, 0xfe, 0x5}, {0xfda, 0x0, 0x20, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5f5aaa0b}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x7, 0x0, 0x9}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x2, 0x3f, 0x7fffffff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x4, 0xaf, 0x0, 0xb19, 0x0, @loopback, @private0, 0x88, 0x7800, 0x4, 0x442}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'syztnl2\x00', r7, 0x29, 0x8, 0xd5, 0x4, 0x52, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x40}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl0\x00', r4, 0x4, 0x80, 0x7f, 0x80000001, 0x5, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x80, 0x4, 0x5}}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/key-users\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r8) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080a4}, 0x8000) [ 210.198300] [ 210.198564] ====================================================== [ 210.199157] WARNING: possible circular locking dependency detected [ 210.199752] 6.13.0-rc7-next-20250120 #1 Not tainted [ 210.200230] ------------------------------------------------------ [ 210.200808] kworker/u8:2/6906 is trying to acquire lock: [ 210.202427] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.204825] [ 210.204825] but task is already holding lock: [ 210.206572] ffff888031e80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 210.208931] [ 210.208931] which lock already depends on the new lock. [ 210.208931] [ 210.210330] [ 210.210330] the existing dependency chain (in reverse order) is: [ 210.211046] [ 210.211046] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 210.211705] __mutex_lock+0x13d/0xb50 [ 210.212165] wiphy_register+0x1b2e/0x25d0 [ 210.212656] ieee80211_register_hw+0x23a4/0x3d60 [ 210.213193] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 210.213753] init_mac80211_hwsim+0x389/0x870 [ 210.214273] do_one_initcall+0xf9/0x640 [ 210.214761] kernel_init_freeable+0x53d/0x7a0 [ 210.215290] kernel_init+0x1e/0x2d0 [ 210.215716] ret_from_fork+0x48/0x80 [ 210.216146] ret_from_fork_asm+0x1a/0x30 [ 210.216632] [ 210.216632] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 210.217247] __lock_acquire+0x29fd/0x4580 [ 210.217719] lock_acquire+0x19b/0x520 [ 210.218158] __mutex_lock+0x13d/0xb50 [ 210.218622] unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.219236] unregister_netdevice_queue+0x224/0x2e0 [ 210.219779] _cfg80211_unregister_wdev+0x57b/0x700 [ 210.220329] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 210.220878] ieee80211_unregister_hw+0x55/0x3a0 [ 210.221394] hwsim_exit_net+0x3a0/0x730 [ 210.221849] ops_exit_list+0xb3/0x180 [ 210.222288] cleanup_net+0x546/0xad0 [ 210.222723] process_one_work+0x8ee/0x1a10 [ 210.223228] worker_thread+0x674/0xe70 [ 210.223693] kthread+0x3ab/0x720 [ 210.224105] ret_from_fork+0x48/0x80 [ 210.224522] ret_from_fork_asm+0x1a/0x30 [ 210.225007] [ 210.225007] other info that might help us debug this: [ 210.225007] [ 210.225741] Possible unsafe locking scenario: [ 210.225741] [ 210.226306] CPU0 CPU1 [ 210.226754] ---- ---- [ 210.227189] lock(&rdev->wiphy.mtx); [ 210.227583] lock(rtnl_mutex); [ 210.228152] lock(&rdev->wiphy.mtx); [ 210.228762] lock(rtnl_mutex); [ 210.229112] [ 210.229112] *** DEADLOCK *** [ 210.229112] [ 210.229670] 4 locks held by kworker/u8:2/6906: [ 210.230114] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 210.231111] #1: ffff88801a8dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 210.232069] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 210.232967] #3: ffff888031e80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 210.233974] [ 210.233974] stack backtrace: [ 210.234402] CPU: 1 UID: 0 PID: 6906 Comm: kworker/u8:2 Not tainted 6.13.0-rc7-next-20250120 #1 [ 210.235222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 210.235985] Workqueue: netns cleanup_net [ 210.236399] Call Trace: [ 210.236647] [ 210.236869] dump_stack_lvl+0xca/0x120 [ 210.237280] print_circular_bug+0x47b/0x750 [ 210.237713] check_noncircular+0x2e9/0x3c0 [ 210.238133] ? __pfx_check_noncircular+0x10/0x10 [ 210.238598] ? hlock_class+0x4e/0x130 [ 210.238968] ? mark_lock+0xac/0xed0 [ 210.239334] ? srso_return_thunk+0x5/0x5f [ 210.239764] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 210.240222] ? lockdep_lock+0xba/0x1b0 [ 210.240629] ? __pfx_lockdep_lock+0x10/0x10 [ 210.241079] __lock_acquire+0x29fd/0x4580 [ 210.241503] ? __pfx___lock_acquire+0x10/0x10 [ 210.241951] ? lock_release+0x20f/0x6f0 [ 210.242355] ? __pfx_lock_release+0x10/0x10 [ 210.242802] lock_acquire+0x19b/0x520 [ 210.243189] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.243763] ? __pfx_lock_acquire+0x10/0x10 [ 210.244196] ? srso_return_thunk+0x5/0x5f [ 210.244625] ? lock_release+0x20f/0x6f0 [ 210.245026] ? srso_return_thunk+0x5/0x5f [ 210.245451] ? lock_is_held_type+0x9e/0x120 [ 210.245894] ? srso_return_thunk+0x5/0x5f [ 210.246326] __mutex_lock+0x13d/0xb50 [ 210.246735] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.247299] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.247863] ? srso_return_thunk+0x5/0x5f [ 210.248297] ? synchronize_rcu_expedited+0x38a/0x420 [ 210.248792] ? __pfx___mutex_lock+0x10/0x10 [ 210.249233] ? __pfx_autoremove_wake_function+0x10/0x10 [ 210.249774] ? srso_return_thunk+0x5/0x5f [ 210.250202] ? kasan_quarantine_put+0x84/0x1e0 [ 210.250660] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 210.251084] ? srso_return_thunk+0x5/0x5f [ 210.251494] unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.252016] ? __virt_addr_valid+0x2e8/0x5d0 [ 210.252442] ? __pfx_lock_release+0x10/0x10 [ 210.252850] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 210.253401] ? find_held_lock+0x2c/0x110 [ 210.253803] ? srso_return_thunk+0x5/0x5f [ 210.254214] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 210.254697] ? srso_return_thunk+0x5/0x5f [ 210.255106] ? lock_release+0x20f/0x6f0 [ 210.255488] ? __pfx_lock_release+0x10/0x10 [ 210.255896] ? srso_return_thunk+0x5/0x5f [ 210.256304] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 210.256790] ? srso_return_thunk+0x5/0x5f [ 210.257203] unregister_netdevice_queue+0x224/0x2e0 [ 210.257667] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 210.258171] ? up_write+0x195/0x520 [ 210.258546] _cfg80211_unregister_wdev+0x57b/0x700 [ 210.259014] ? srso_return_thunk+0x5/0x5f [ 210.259423] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 210.259889] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 210.260394] ? srso_return_thunk+0x5/0x5f [ 210.260799] ? srso_return_thunk+0x5/0x5f [ 210.261206] ? synchronize_rcu+0x1ff/0x260 [ 210.261603] ieee80211_unregister_hw+0x55/0x3a0 [ 210.262042] hwsim_exit_net+0x3a0/0x730 [ 210.262422] ? __pfx_hwsim_exit_net+0x10/0x10 [ 210.262853] ? srso_return_thunk+0x5/0x5f [ 210.263259] ? netdev_run_todo+0x788/0x1040 [ 210.263671] ? __pfx_hwsim_exit_net+0x10/0x10 [ 210.264095] ops_exit_list+0xb3/0x180 [ 210.264461] cleanup_net+0x546/0xad0 [ 210.264823] ? __pfx_cleanup_net+0x10/0x10 [ 210.265233] process_one_work+0x8ee/0x1a10 [ 210.265654] ? __pfx_lock_acquire+0x10/0x10 [ 210.266062] ? __pfx_process_one_work+0x10/0x10 [ 210.266520] ? srso_return_thunk+0x5/0x5f [ 210.266927] ? move_linked_works+0x172/0x270 [ 210.267344] ? srso_return_thunk+0x5/0x5f [ 210.267749] ? assign_work+0x196/0x240 [ 210.268138] worker_thread+0x674/0xe70 [ 210.268525] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 210.269018] ? srso_return_thunk+0x5/0x5f [ 210.269423] ? __pfx_worker_thread+0x10/0x10 [ 210.269855] kthread+0x3ab/0x720 [ 210.270195] ? __pfx_kthread+0x10/0x10 [ 210.270585] ? srso_return_thunk+0x5/0x5f [ 210.270994] ? finish_task_switch.isra.0+0x206/0x840 [ 210.271471] ? __pfx_kthread+0x10/0x10 [ 210.271855] ret_from_fork+0x48/0x80 [ 210.272202] ? __pfx_kthread+0x10/0x10 [ 210.272585] ret_from_fork_asm+0x1a/0x30 [ 210.272997] [ 212.081887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.085731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.099499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.109125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.110770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.111849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.154739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.156875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.158084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.160914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.162520] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.163566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.212467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.213054] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.214797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.229904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.233955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.234875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.280760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.289358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.291487] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.302705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.308433] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.309762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.347459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.352972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.357267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.369658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.372342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.392463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.398205] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.407632] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.408441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.414824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.433784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.443353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.516311] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.537348] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.539330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.595425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.603463] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.604472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.186338] Bluetooth: hci1: command tx timeout [ 214.186468] Bluetooth: hci0: command tx timeout [ 214.250367] Bluetooth: hci2: command tx timeout [ 214.378241] Bluetooth: hci3: command tx timeout [ 214.508251] Bluetooth: hci6: command tx timeout [ 214.508323] Bluetooth: hci5: command tx timeout [ 214.698252] Bluetooth: hci7: command tx timeout [ 216.235262] Bluetooth: hci0: command tx timeout [ 216.235337] Bluetooth: hci1: command tx timeout [ 216.298229] Bluetooth: hci2: command tx timeout [ 216.426252] Bluetooth: hci3: command tx timeout [ 216.554281] Bluetooth: hci5: command tx timeout [ 216.554838] Bluetooth: hci6: command tx timeout [ 216.746395] Bluetooth: hci7: command tx timeout [ 218.283293] Bluetooth: hci1: command tx timeout [ 218.283398] Bluetooth: hci0: command tx timeout [ 218.346494] Bluetooth: hci2: command tx timeout [ 218.474427] Bluetooth: hci3: command tx timeout [ 218.604269] Bluetooth: hci6: command tx timeout [ 218.604284] Bluetooth: hci5: command tx timeout [ 218.795223] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:00:59 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88800ef6f810 RCX=ffffffff8134b31e RDX=ffffed1001dedefd RSI=0000000000000070 RDI=ffff88800ef6f778 RBP=ffff88800ef6f778 RSP=ffff88800ef6f6f8 R8 =0000000000000001 R9 =ffffed1001dedefc R10=ffff88800ef6f7e7 R11=0000000000000003 R12=0000000000000070 R13=0000000000000000 R14=ffff888013380000 R15=ffff88800ef6f778 RIP=ffffffff84ab1f40 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8e9316a8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563b79472420 CR3=000000000baf6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00ff00000000ff00000000ff000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000004000000020000563b794c25d0 XMM06=0000563b79475a100000000100000003 XMM07=00000000000000000000000000000000 XMM08=20202020203a657a697320656c696600 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283e250 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88801a8deb60 R8 =0000000000000000 R9 =fffffbfff0be1bdc R10=00000000000fe503 R11=6f6c206863696877 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10d3266 R15=dffffc0000000000 RIP=ffffffff8283e2a5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563b794c8148 CR3=000000003a4b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffff0000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ff0000ff000102010000000000000003 XMM06=ffffffff000000050000563b794758f0 XMM07=00000000000000000000000000000000 XMM08=610064253a64252f6b636f6c622f7665 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000