Warning: Permanently added '[localhost]:4234' (ECDSA) to the list of known hosts. 2025/11/12 18:24:46 fuzzer started 2025/11/12 18:24:46 dialing manager at localhost:32769 syzkaller login: [ 57.257692] cgroup: Unknown subsys name 'net' [ 57.336293] cgroup: Unknown subsys name 'cpuset' [ 57.350266] cgroup: Unknown subsys name 'rlimit' 2025/11/12 18:24:57 syscalls: 200 2025/11/12 18:24:57 code coverage: enabled 2025/11/12 18:24:57 comparison tracing: enabled 2025/11/12 18:24:57 extra coverage: enabled 2025/11/12 18:24:57 setuid sandbox: enabled 2025/11/12 18:24:57 namespace sandbox: enabled 2025/11/12 18:24:57 Android sandbox: enabled 2025/11/12 18:24:57 fault injection: enabled 2025/11/12 18:24:57 leak checking: enabled 2025/11/12 18:24:57 net packet injection: enabled 2025/11/12 18:24:57 net device setup: enabled 2025/11/12 18:24:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/12 18:24:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/12 18:24:57 USB emulation: enabled 2025/11/12 18:24:57 hci packet injection: enabled 2025/11/12 18:24:57 wifi device emulation: enabled 2025/11/12 18:24:57 802.15.4 emulation: enabled 2025/11/12 18:24:57 fetching corpus: 0, signal 0/0 (executing program) 2025/11/12 18:24:58 starting 8 fuzzer processes 18:24:58 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x38}}, 0x20401) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4004) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7, 0x0, 0x8, 0x0, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x64, 0x0, 0x7f, 0x29, 0x0, @local, @private=0xa010102, {[@generic={0x94, 0x11, "fe458e6311e17042d498fa9c535ad8"}, @timestamp_addr={0x44, 0x3c, 0x18, 0x1, 0x9, [{@multicast1, 0x8}, {@multicast2, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x1}, {@broadcast, 0x80}]}, @timestamp_addr={0x44, 0x3c, 0xac, 0x1, 0x8, [{@remote, 0x7}, {@rand_addr=0x64010102, 0xff}, {@local, 0x9}, {@broadcast, 0x80000000}, {@empty, 0x20}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0x11, 0x3, 0x1, [{@private=0xa010102, 0x7fff}, {@remote, 0xffffff1c}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x1, 0x8, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x13, 0x82, [@rand_addr=0x64010101, @empty, @private=0xa010101, @broadcast]}, @generic={0x86, 0xb, "dc397be327d4bed9fb"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x0, 0x4565, {{0x22, 0x4, 0x2, 0x3, 0x88, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x1f, 0x49, [@multicast2, @multicast2, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @remote]}, @timestamp={0x44, 0x18, 0x9f, 0x0, 0xe, [0x8, 0xffffe9ec, 0x1, 0x7, 0x9]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x4, "968f"}, @cipso={0x86, 0x34, 0x0, [{0x5, 0x6, "3e822183"}, {0x5, 0x3, 'o'}, {0x7, 0x6, "c4129f42"}, {0x7, 0x10, "42414b83aac369174e0430da1f96"}, {0x0, 0xf, "90a9e8464c903cefc444c7b5c1"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000940)={0x51c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x810}, 0x20000004) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x26e47561}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x891) ioprio_get$uid(0x0, 0x0) socketpair(0xe, 0x80002, 0x81a, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000010c0)={0x0, @can={0x1d, r9}, @l2={0x1f, 0x4f4f, @any, 0x6}, @rc={0x1f, @any, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)='wg1\x00', 0x9, 0x1000, 0xffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xdc, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcfa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x600088c1}, 0x4) 18:24:58 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x190, r2, 0x111, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4483}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x46, 0x6, 0x464d}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x324}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r3}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r4 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'syztnl1\x00', r3, 0x700, 0x8000, 0x7, 0x4, {{0xf, 0x4, 0x3, 0x3c, 0x3c, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @rr={0x7, 0x1b, 0xb1, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @remote, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4001004}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)={0x3ec, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7c}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9c1, 0x4, 0x5, 0x2}, {0x4, 0xa3, 0x0, 0x81}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x3f, 0x0, 0x5}, {0x8, 0x81, 0xff, 0x8}, {0x9, 0x7f, 0x81, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x18, 0x2, 0x8001, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000980), r9) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xba5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x7fffffff, 0x70}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2a, 0x2f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x10001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000cc0)={'syztnl0\x00', r5, 0x40, 0x8000, 0x0, 0xffff7fff, {{0x26, 0x4, 0x1, 0x5, 0x98, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, {[@end, @ssrr={0x89, 0x27, 0xec, [@empty, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @loopback, @empty, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0xd1, 0x0, 0x8, [0x3]}, @lsrr={0x83, 0x17, 0xda, [@dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, @broadcast, @multicast2]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0x10, 0x0, 0x1, [0x9, 0xfffffff7, 0xc6, 0xff, 0x1, 0x3, 0x100, 0x0, 0x400, 0x4131]}, @end, @ssrr={0x89, 0xb, 0xe5, [@local, @broadcast]}]}}}}}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000e00)={0x0, @xdp={0x2c, 0x1, r5, 0x20}, @nl=@unspec, @nfc={0x27, 0x0, 0x0, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)='team_slave_0\x00', 0x9, 0x8, 0x3}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000f00)={'ip_vti0\x00', &(0x7f0000000e80)={'syztnl1\x00', r3, 0x40, 0x40, 0x2, 0x2, {{0x15, 0x4, 0x2, 0x5, 0x54, 0x68, 0x0, 0x3f, 0x29, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x13, 0xc6, [@broadcast, @empty, @local, @multicast1]}, @end, @noop, @timestamp={0x44, 0x18, 0xb4, 0x0, 0x5, [0x10000000, 0x80000000, 0x712, 0x80, 0x100]}, @rr={0x7, 0x13, 0xe7, [@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001800)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001140)={0x680, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x1d8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1, 0x2, 0xffffffff}, {0x800, 0x3, 0x4, 0xfff}, {0x89e9, 0x7c, 0x2, 0x2}, {0x4, 0x3, 0x1f, 0x9}, {0x7, 0x4, 0x8, 0x6}, {0x1, 0x22, 0x2, 0x3}, {0x6, 0x3, 0x7, 0x2}]}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x35d5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r14}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7f, 0x60, 0x8, 0x89}, {0xc9a4, 0x9, 0x4e, 0x5}, {0x5, 0x2b, 0xf8, 0x2}, {0xf000, 0x0, 0x6, 0x76c}, {0x1f, 0xa3, 0x1, 0xb58}, {0x9, 0x5, 0x9, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x15, 0x0, 0x1}, {0x8, 0xff, 0x93, 0x7ff}, {0x3, 0xff, 0xff, 0x7fffffff}, {0xfffd, 0x2, 0x7, 0x5e}, {0x4, 0xcc, 0x1f, 0xffffffff}, {0x3ff, 0x7, 0x3, 0x4}, {0x5, 0x7, 0xc, 0x1ffc}, {0x5, 0x9, 0x64, 0x4}, {0x0, 0xa3, 0x6, 0x9ad00000}]}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x100, 0x1c, 0x6, 0x81}, {0x41a, 0x4, 0x7, 0x20000000}, {0xa13, 0xef, 0x16, 0xfffffffb}, {0x1709, 0x74, 0x8}, {0x1ff, 0xfb, 0x0, 0x5}, {0xfc00, 0x4, 0x1, 0x4be11d5e}, {0x7, 0x3, 0x7, 0x6}, {0x8, 0x1f, 0xff, 0x8001}, {0x98e, 0x0, 0x3, 0x33b664a4}, {0x100, 0x8, 0x5, 0x2}]}}}]}}, {{0x8, 0x1, r10}, {0x4}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x680}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) 18:24:58 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88004010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x4, 0x1}, @nl=@unspec, @nfc={0x27, 0x1, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x5668, &(0x7f0000000240)='sit0\x00', 0x6, 0x10001, 0x2}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44051}, 0x20040040) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}]}, 0x94}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/slab_common', 0x1c1080, 0xb) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) r6 = openat$cgroup_ro(r4, &(0x7f0000000840)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004}, 0x4045) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x145af7effba43b19}, 0x10) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x4, 0x1000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2bc, r7, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x7c}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x1, 0x4, 0x0, {0x100000001, 0x1762, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x5}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x1, 0x0, {0x9, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x5, 0x1f}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9c}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1f}]}, @NL80211_ATTR_HIDDEN_SSID={0x24, 0x7e, @random="66b5b5437880fc9e54ca3ab4565748c1667fc3ae387c58697a01a4f78ef9b365"}, @NL80211_ATTR_KEYS={0x204, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2eea7dcd68"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "a42c4bb2c66dc255275f71dd61c1"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a255401dd9e291d535256716a7"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d260f1e03560270cf2936ab1c0"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5e83b8b458ed4c9dec0a992f2f"}, @NL80211_KEY_SEQ={0x10, 0x4, "42c4727ca6e778a352938dea"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "73f58a693197b41f4b4a84c78c"}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x14, 0x4, "4c3f9d323b7b354c98d2987b477b024e"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dbe843b559"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "616cdd334fea03f3630dc353b3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "71f97adc0f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e012b320f4f83b78cf06cd85be"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "f0169c0f"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c10a1a0841eecedb8890c080ce"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) 18:24:58 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000000c0)={0xacc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x298, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x2, 0xc36244735eb0d5a1, 0x2, 0x4, 0xb, 0x1, 0x12, 0x16, 0x4, 0x60, 0x12, 0x68, 0xe, 0x1, 0x1, 0x5, 0xb, 0x1, 0x6c, 0x1b, 0xb, 0x4, 0x42, 0x0]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x60, 0x3]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0xa}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x4, 0x6, 0x12, 0x60, 0x48, 0x1, 0x6, 0x1, 0xf, 0x30, 0x9, 0x9, 0x60, 0x6, 0x30, 0x5, 0x6, 0x12, 0x1b, 0x9, 0xc]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x5, 0x6c, 0x24, 0x6, 0x16, 0xc, 0x1, 0x18, 0x69, 0x1b, 0x36, 0x2, 0x6c, 0x36, 0x60, 0x24, 0x1b, 0x36, 0x30, 0x36, 0x12, 0x6, 0x48, 0x2, 0x60]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0xa}, {0x1, 0x8}, {0x2, 0x8}, {0x7}, {0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x5, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x9}, {0x5, 0x9}, {0x1}, {0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x1}, {0x4, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x6}, {0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x1d}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x1, 0x18, 0x4]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x2f, 0x9, 0xc, 0x16, 0x24, 0x6c, 0x1b, 0x48, 0x1, 0x48, 0x4, 0x2, 0x0, 0x6, 0xb, 0x1, 0x30, 0x6c, 0x1, 0x18, 0x66, 0x36, 0x6c, 0x2b, 0x24, 0xb, 0x2, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x36, 0xc, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x5fc, 0x2, 0x6, 0x2000, 0x9, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x5, 0x2, 0x6, 0x6, 0x1, 0x7d]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x4}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0x2}, {}, {0x7}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x3}, {0x5, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x7, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0x3}, {0x1}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x1}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x6}, {0x4, 0xa}, {0x7, 0x9}, {0x3, 0x3}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x6, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x4}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x12, 0x48, 0x18, 0x18, 0x60, 0xb, 0x60]}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x0, 0x4, 0x0, 0x6, 0x7f, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x2, 0x1, 0x30, 0x36, 0xb, 0x18, 0x12, 0x12, 0x18, 0x36, 0x2, 0x48, 0x12, 0x1b, 0x3, 0x3, 0x60, 0x5, 0x36, 0x9, 0x0, 0x12, 0x16, 0xb]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x4}, {0x4, 0x9}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {}, {0x0, 0x9}, {0x3, 0x17}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0x9}, {0x7, 0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1, 0x9, 0x3b4b, 0x5, 0x40, 0xbf, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xfffc, 0x1, 0x3, 0x54, 0x2, 0xfe, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xff, 0x5, 0x3, 0x800, 0x9, 0x4, 0xd54]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x1b, 0xb, 0x18, 0x0, 0x36, 0x4, 0x9, 0x60, 0x18, 0x3, 0x36, 0x4, 0x0, 0x9, 0x6c, 0x4, 0x0, 0xc, 0x6, 0x12, 0x18, 0x4, 0x30, 0x5, 0x33, 0x2, 0x48, 0x12, 0x4, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xc1a3, 0x1, 0xa70, 0x8, 0x1f, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa67, 0x2ae6, 0x6, 0x1bb, 0x7, 0x1215, 0x4c, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xa0, 0x0, 0x0, 0x0, 0x40, 0xffff, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x3}, {0x1, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x67, 0xc, 0x5, 0x1b, 0x6, 0x16, 0x12, 0xb, 0x2, 0x16, 0x6b, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x24, 0x8f, 0xffff, 0xa41b, 0x7, 0x2, 0xd1cb, 0x84]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x5, 0x1b, 0x16, 0x4, 0xc, 0x66, 0xb, 0x4, 0x20e67a34a6ec9bb5, 0x24, 0x16, 0x5, 0x9]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x2, 0x6, 0x48, 0x13, 0x16]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0xc, 0x4, 0x12, 0x8, 0x9, 0x2, 0x9, 0xb, 0xc, 0xb, 0x5ed3df6242bf6e77, 0x6c, 0x24, 0xb, 0x12, 0x9, 0x77, 0x18, 0x18, 0xb, 0xc]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x5, 0x9, 0x2, 0x30, 0x16, 0x1, 0x6, 0x6, 0x9, 0x0, 0x60, 0x6c, 0x4e, 0x9, 0x6c, 0x9, 0x5, 0x12, 0x2, 0x18, 0x9, 0x2, 0x48, 0x60, 0x24]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x6c, 0x6, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x0, 0x53b, 0x7, 0x6, 0x7fff, 0xf000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0xffa0, 0x1ff, 0x9, 0x2, 0x2, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0xf1d6, 0x24da, 0x8, 0x3ff, 0x5eb3, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x77f, 0x88e, 0x90, 0x4, 0x1, 0x3e, 0x400]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x16, 0x1, 0x3, 0x5, 0x6, 0xb, 0x60, 0x1b, 0x3, 0xb, 0x30, 0x12, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff80, 0x1, 0x400, 0x7, 0x2, 0xff7f, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa0, 0x80, 0x2, 0x8, 0x2, 0x22, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x4, 0x9, 0x0, 0x6c, 0x9, 0x60, 0x6c, 0x2, 0x42, 0x1, 0xc, 0x1, 0x6, 0x24, 0x9, 0xc, 0xc, 0x6c, 0x12, 0x1b, 0x1, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x3, 0x1, 0x36, 0x2, 0x24, 0x6, 0x1b, 0x6c, 0x6, 0x5, 0x48, 0xb, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x1b, 0x36, 0x16, 0x16, 0x60, 0x16, 0x16, 0x3, 0x1b, 0x1, 0x14]}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0xa}, {0x3, 0x8}, {}, {0x1, 0x9}, {0x7, 0x6}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0xa}, {0x3, 0x2}, {0x6, 0x8}, {0x4, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {0x6, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0x7, 0x36cf, 0x0, 0x8001, 0x3, 0xfb49]}}]}]}, @NL80211_ATTR_TX_RATES={0x30c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8000, 0x3f, 0x0, 0x1ff, 0xfff3, 0x34d1, 0x9]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0xa}, {0x2, 0x6}, {0x2, 0x4}, {0x6, 0x6}, {0x2}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa15c, 0x4, 0x7c00, 0x6, 0x5, 0xd94, 0x3, 0x4c31]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3ed2bf7f0a72fa9}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x4}, {0x5}, {0x6, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x6, 0x2}, {0x4, 0x5}, {0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x8}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x1}, {0x7, 0x5}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x60, 0x12, 0x2, 0x5, 0x3, 0x5, 0x3, 0x5, 0x8f, 0x30, 0x9, 0x6c, 0x1, 0x16, 0x4, 0x12, 0x60, 0x30]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfced, 0xfffc, 0x1f, 0x7cdc, 0x36]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xd3f9, 0x1ff, 0xffff, 0x0, 0x5, 0xf03d, 0x5]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x2, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x9, 0x6c, 0x50, 0x18, 0x6c, 0x6c, 0xc, 0x6c, 0x30, 0x30, 0x60, 0xc, 0x4, 0x60, 0x30, 0x12, 0x60, 0x48, 0x18, 0x3, 0x5, 0x6, 0x18, 0x16]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8dba, 0x80a5, 0x8, 0x6bb5, 0x2, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x8}, {0x5, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x3}, {0x5, 0x1}, {0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7}, {}, {0x1, 0x6}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x5, 0x9}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x2, 0x8}, {0x7, 0x6}, {0x1, 0x5}, {0x5}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x2}, {0x3, 0x1}, {}, {0x2, 0x6}, {0x5, 0x5}, {0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x7}, {0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x7, 0x8}, {0x6, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x7}, {0x1, 0x9}, {0x2, 0x2}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x7}, {0x2, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x6}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x4}, {0x6, 0x4}, {0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x4, 0x3}, {0x7, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x3, 0x7}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x6}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x7}, {0x4, 0xa}]}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x9, 0xc, 0x12, 0x0, 0x9, 0x1, 0x4, 0x60, 0x48, 0x2, 0x60, 0x1, 0x0, 0x1, 0x36, 0x48, 0x6, 0x6c, 0x9, 0xb, 0x60, 0x60, 0x16, 0x9, 0x16, 0x30, 0x5, 0x60, 0x24, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x6}, {0x3, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x5}, {0x2}, {0x5, 0xa}, {0x6, 0x2}, {0x5, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0x5}, {0x7, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x30, 0x24, 0xc, 0xc, 0x3, 0x4678c32cd4e970ad, 0xb, 0x32, 0x12, 0xc, 0x60, 0x4, 0x30, 0x3, 0x16, 0x4e, 0x16, 0x2, 0x60, 0x53, 0x5, 0x5, 0x18, 0x6c, 0x1, 0x1, 0x18, 0x24, 0x36, 0x36, 0x6c]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x5}, {0x5, 0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x7, 0x4}, {0x7, 0x6}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x4, 0x9}, {}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x1}, {0x5, 0x3}, {0x2, 0xa}, {0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x0, 0x7, 0x3f, 0x8, 0xfe00, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0xa}, {0x5, 0x7}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {}, {0x4, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x3, 0x3}, {0x1, 0x4}, {0x7, 0x4}, {0x6, 0x6}, {0x5, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0xd}, {0x3, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe3, 0x4fdb, 0x8001, 0x81, 0x6, 0x6, 0x3ff, 0x1]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x1}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {}, {0x4, 0x9}, {0x2}, {0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0xa}, {0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x4}, {0x4}, {0x0, 0x7}, {0x4, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x6, 0x6}, {0x7, 0x7}, {0x4}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x4, 0x9}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x5, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x5, 0x9}, {0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x3}, {0x5}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x4}, {0x3, 0x3}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x48, 0x5, 0x60, 0x36, 0x20, 0x9, 0x6c, 0x3, 0x5f, 0x9, 0x1, 0x36, 0x3, 0x6, 0x48, 0x9, 0x1b, 0x60, 0x9, 0x6c, 0x6, 0x5, 0x18, 0x6, 0x2, 0xb, 0x12]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x8}, {0x1, 0x9}, {0x7, 0x2}, {0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x2}, {0x2, 0x6}, {0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {}, {0x3, 0x9}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x3, 0x9}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x5, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x2}, {0x6}, {0x2}, {0x0, 0x6}, {0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {0x1}, {0x0, 0x4}, {0x3}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0x4}, {0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xc0cd35aeb3d676de}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb, 0xfff8, 0xb92, 0x8, 0x1, 0xb11f, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x1}, {0x4, 0x5}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xfff8, 0x2, 0x0, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x463d65ba18a8c5e3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0xf0, 0x5, 0xb3c, 0xfff, 0x1, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x60, 0x30, 0x9, 0x4, 0x6c, 0x9, 0x36, 0x5, 0x5, 0xc, 0x36, 0x9, 0xc, 0x9, 0x52, 0x1, 0x48, 0x5, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x6, 0x1b, 0x4, 0x48, 0x1, 0xb, 0xc, 0x12, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x18, 0x48, 0x9, 0x5, 0x30, 0x30, 0x2b, 0x6, 0x18, 0x48, 0x6c, 0x30, 0x4, 0x24, 0x10, 0x18, 0x2, 0x1, 0x2, 0x4, 0x3, 0xc, 0x2e, 0x5]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x12, 0x3, 0xc, 0x6, 0x5c8c6a3582257a46, 0x18, 0x48, 0x6c, 0x6c, 0xb, 0x1b, 0x36, 0x1b, 0x6]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x200, 0x5, 0xa9, 0x4, 0x0, 0x7ae]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f49, 0x3ff, 0x5, 0x401, 0x3f, 0x20, 0x4b5d, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x6, 0x4, 0x725, 0x2, 0x80, 0x680f]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x36, 0x1, 0x30, 0x24, 0xc, 0xc, 0x1, 0x48, 0x16, 0x1, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x2}, {0x2, 0x5}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0xa}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x3}, {0x4, 0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0x7}, {0x6}, {0x4}, {0x6, 0x6}, {0x5, 0xa}, {}, {0x7, 0xa}, {0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x1}, {}, {0x2, 0x2}, {}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x9}, {0x5, 0x5}, {0x3, 0x3}, {0x1}, {0x7}, {0x4, 0x5}, {0x3, 0x4}, {0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xadac, 0x3f, 0xd6a4, 0x3, 0x80, 0x5, 0x0, 0x1]}}]}]}]}, 0xacc}, 0x1, 0x0, 0x0, 0xc0}, 0x4000011) socketpair(0x2, 0x1, 0x3, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x138, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fd8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3c2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x400c000}, 0x4040040) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001080)={0x0, @sco={0x1f, @none}, @llc={0x1a, 0x336, 0x4, 0x7, 0x5, 0x5, @random="a2329dee277b"}, @llc={0x1a, 0x13, 0xc2, 0x2, 0x6, 0x4, @multicast}, 0x2, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000001040)='ip_vti0\x00', 0x0, 0x8001, 0x1}) socketpair(0x1a, 0x6, 0x4, &(0x7f0000001140)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000012c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001840)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001640)={0x198, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x44800}, 0x4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001880), 0x503000, 0x0) write$P9_RSTATFS(r8, &(0x7f00000018c0)={0x43, 0x9, 0x2, {0x6, 0x6, 0x5, 0x0, 0x5, 0x800000000000000, 0x1, 0x80000000, 0x7}}, 0x43) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000002280)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002240)={&(0x7f0000001f40)={0x2c8, 0x0, 0x821, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r7}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8021}, 0x50) 18:24:58 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x100010, 0xffffffffffffffff, 0x10000000) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x20, 0xb26, 0x20, 0x3f}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x24000040) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c0, r0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x400, 0x20, 0x6, 0x2, 0x5, 0x1000]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x7}, {0x6, 0x2}, {0x3, 0x7}, {}, {0x3, 0x3}, {0x3, 0x8}, {0x5, 0x5}, {}, {0x2, 0x8}, {0x0, 0xa}, {0x1}, {0x7, 0x5}, {0x7, 0x6}, {0x3, 0x7}, {}, {0x2, 0x4}, {0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x5}, {0x2, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x4, 0x24, 0x60, 0x2, 0x9, 0x9, 0x48, 0x6c, 0x18, 0x6, 0x48, 0x16, 0x43, 0x30, 0x18, 0x18, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x4, 0x48, 0x5, 0x16, 0x6, 0x5, 0x1, 0x36, 0x18, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x6, 0xfff9, 0xff, 0x0, 0x3f0, 0x13]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x2}, {0x0, 0x8}, {0x2, 0x7}, {0x6}, {0x5, 0x5}, {0x5, 0x4}, {}, {0x6}, {0x0, 0x9}, {0x5}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x8}, {0x1, 0x6}, {0x7, 0x1}, {0x7}, {0x0, 0x5}, {0x1}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x4}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x4, 0xa}, {0x5, 0x7}, {0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x6, 0x6, 0x6, 0x2, 0x16, 0x6c, 0x18, 0x2, 0x30, 0x6c, 0x48, 0x12, 0x12, 0xc, 0x18, 0xb, 0x1b, 0x3]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x30, 0x16, 0x9, 0x4, 0xc, 0x12, 0x30, 0x36, 0x12, 0xc, 0x5, 0xc, 0x2, 0x36, 0x60, 0x12, 0x6c, 0x4, 0x6, 0x16, 0x1b, 0x18, 0x5, 0x4, 0x5, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x0, 0x9, 0x200, 0x200, 0xfe00, 0x2, 0xd30]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x6c, 0x6, 0x60, 0x16, 0x5, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x583, 0x9, 0x7, 0x7f, 0x3, 0x100, 0x5, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x7, 0x3, 0xc, 0x3, 0x6, 0x4, 0x0, 0x0, 0x30, 0x1b, 0x24, 0x0, 0x46, 0x48, 0x1b, 0x18, 0x48, 0x30, 0x4, 0x1, 0x9, 0x2, 0x5, 0x2, 0x60, 0x2]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x5, 0x8}, {}, {0x5, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x5}, {}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x2}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x5}, {0x0, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) clone3(&(0x7f0000000780)={0x100, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0, {0x1c}, &(0x7f0000000580)=""/202, 0xca, &(0x7f0000000680)=""/191, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r1}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x67}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004055) socketpair(0x10, 0x800, 0xfffffffe, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000a40)="be015434eaa67a12b088e9fe2eaa34fa99a5071a6a6880fb852e072df522221cdf50820d13bb245b44493250fd281125be0205aaf4512ef3bb38f8beb5e1bd68e1d393244b568b7d8681eee0e76f8642df0f35b36d02855634f4ff5d67bff51e238b195512fbaad3d4d321a6f2ca6a086ce1") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'erspan0\x00', 0x0, 0x20, 0x80, 0x200, 0x80000000, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x65, 0x0, 0x71, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0x85, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @local]}, @lsrr={0x83, 0x17, 0x9c, [@multicast2, @broadcast, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0xc8, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000d40)={'ip_vti0\x00', &(0x7f0000000cc0)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x6, 0xde16, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x5, [{@local, 0xc6f}]}, @lsrr={0x83, 0x17, 0xcd, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x6, 0x0}, @multicast2]}, @lsrr={0x83, 0x17, 0xc, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x5f, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c0c8}, 0x0) r9 = openat$cgroup_ro(r1, &(0x7f0000000ec0)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}}, 0x20040000) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x78}}}}, ["", "", "", "", ""]}, 0x28}}, 0x0) 18:24:58 executing program 5: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r0, 0x628, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa8, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4011}, 0x48001) socketpair(0x29, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x124, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x34, 0x2a, [@measure_req={0x26, 0xe, {0x46, 0xff, 0x1, "d56cec218868b4a213cce1"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @erp={0x2a, 0x1, {0x1}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @challenge={0x10, 0x1, 0xd5}, @chsw_timing={0x68, 0x4, {0x800, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xd1, 0x60}}, @channel_switch={0x25, 0x3, {0x1, 0x65, 0xa6}}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2df}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0xa8, 0x1, @device_a, 0x80, @device_b, 0x6000000, 0x80000001, @broadcast, 0x7fff}}]}, @NL80211_ATTR_IE={0x4f, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3f, 0x8}}, @chsw_timing={0x68, 0x4, {0x7fff, 0x4}}, @dsss={0x3, 0x1, 0xa1}, @channel_switch={0x25, 0x3, {0x0, 0x2c, 0x7}}, @sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0x3, 0x29, "5d1be1d2074bd9ea05223d6c9f847b8cb09868b853ad47124269a98b7f451253a80e33819f91408a4d"}, @dsss={0x3, 0x1, 0x7}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3d8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0xc}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x41) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40400801}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8804}, 0x24044001) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000001080)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000bc0)={0x45c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x286}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff20}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x520}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001200)={'ip_vti0\x00', &(0x7f0000001100)={'gre0\x00', r8, 0x8000, 0x80e8, 0x3, 0x1, {{0x38, 0x4, 0x0, 0x0, 0xe0, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @local, {[@end, @ssrr={0x89, 0x23, 0x78, [@dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @local, @loopback, @broadcast, @remote, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x54, 0x33, 0x1, 0x3, [{@local, 0x5}, {@private=0xa010102, 0x8}, {@local, 0xbad}, {@loopback, 0xa7400000}, {@loopback, 0x3}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbef}, {@local, 0xffffffff}, {@multicast1, 0x3}]}, @cipso={0x86, 0x27, 0x2, [{0x6, 0x10, "e623911e96b2a68148fd5065590d"}, {0x2, 0x11, "558dcf06af802f589f18f130f587ac"}]}, @lsrr={0x83, 0x3, 0xf1}, @generic={0x86, 0xd, "6b85b3125d0a524077ebaa"}, @ssrr={0x89, 0xf, 0xfb, [@loopback, @empty, @rand_addr=0x64010102]}, @generic={0x81, 0xe, "0783d797855a008581555d1f"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001540)={'erspan0\x00', &(0x7f0000001480)={'syztnl1\x00', r10, 0x20, 0x10, 0x7, 0x8, {{0x1b, 0x4, 0x2, 0x3d, 0x6c, 0x66, 0x0, 0xf8, 0x29, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x49, 0x3, [{0x5, 0xe, "d1a52cc3e91c21ab6e0a8058"}, {0x0, 0xf, "e77abe02baf9e15ed2cd4b4024"}, {0x4, 0x6, "a5784382"}, {0x2, 0xe, "8dca7e1a55585d398ac3f53b"}, {0x0, 0xc, "76be5cc1ae006822a8dc"}, {0x89e2bd63874552dd, 0x2}, {0x5, 0x4, "f631"}]}, @end, @timestamp={0x44, 0xc, 0x66, 0x0, 0x8, [0x2, 0x20]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000002580)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002540)={&(0x7f0000001a80)={0xaa0, 0x0, 0x103, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xdd7a, 0x4, 0x6, 0x9}, {0x5, 0x1, 0x9, 0x1}, {0x86, 0x80, 0x7, 0x200}, {0x3, 0x1, 0x1, 0xff}, {0x1, 0xff, 0x3f, 0x1000}, {0x7, 0x3, 0x8, 0x4}, {0x7, 0xff, 0x2, 0x4}, {0x7, 0x9, 0x7a, 0xff}, {0x1000, 0x3f, 0x2, 0x368}, {0x6, 0x8, 0x1, 0x20}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r12}, {0x208, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x5, 0x80}, {0x70, 0x1, 0x0, 0x7}, {0xff80, 0x0, 0x1, 0x2}, {0x3f, 0x1, 0x7, 0x9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc22}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r7}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x38}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb4ab}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xd4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x14, 0x1f, 0x91d2}, {0x3, 0x1, 0xb3, 0x1b1}, {0x5, 0x8, 0xc7, 0x2}, {0x0, 0x7, 0x4, 0x2}, {0x48, 0x80, 0x7, 0x60d}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x40810}, 0xddcc646f086e42e1) 18:24:58 executing program 1: r0 = getpid() clone3(&(0x7f0000001180)={0x40205000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/62, 0x3e, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x101180, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x164, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x124, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x7, 0x3f, 0x56db}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0c}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x12130953c437236a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c80)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x288, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17c}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x14, 0xfc, 0x81, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x44814}, 0x4000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80080, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x400000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x40000) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x54, r9, 0x21, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044840}, 0x4001) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/module/pcie_aspm', 0x704580, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002280)) syz_open_procfs$namespace(r1, &(0x7f00000022c0)='ns/ipc\x00') 18:24:58 executing program 6: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x8fb6000, 0x0, {{0x20, 0x4, 0x1, 0x2, 0x80, 0x68, 0x0, 0x5, 0x0, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x2c, 0xa9, 0x3, 0x3, [{@multicast2, 0x80000001}, {@loopback, 0x4}, {@multicast2, 0xfffff229}, {@private=0xa010101, 0xffff683c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}]}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0xc, [{@local, 0x6}, {@multicast2, 0x36bdfc2d}]}, @timestamp_addr={0x44, 0x2c, 0x20, 0x1, 0x3, [{@private=0xa010102, 0x7}, {@empty}, {@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xdb}, {@multicast1, 0x6}]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1404408}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb0cc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x9804af30e404741f}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004044) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) alarm(0x8) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10004080) syz_emit_vhci(&(0x7f0000000ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x29}, {0xa, [{0xd1087bd0280cd143, 0xffff}, {0xc8, 0x5}, {0xc8, 0x7ff}, {0xc9, 0x3}, {0xc9, 0x4}, {0xc9}, {0xc8, 0x7fff}, {0xc9, 0x9d30}, {0xc9, 0x7fff}, {0xc8, 0x800}]}}}, 0x2c) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)) [ 67.967269] audit: type=1400 audit(1762971898.775:7): avc: denied { execmem } for pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 69.122557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.125095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.127858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.132267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.137306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.191642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.194471] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.196545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.201840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.203090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.205130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.208140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.211750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.224494] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.228557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.257095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.259538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.261868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.263682] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.265760] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.267050] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.270057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.273098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.273198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.274622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.276091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.282319] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.284562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.284737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.291745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.293675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.295628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.295872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.298309] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.304992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.307699] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.309270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.314923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.328910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.331597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.154463] Bluetooth: hci0: command tx timeout [ 71.281569] Bluetooth: hci1: command tx timeout [ 71.347114] Bluetooth: hci2: command tx timeout [ 71.409479] Bluetooth: hci5: command tx timeout [ 71.409966] Bluetooth: hci6: command tx timeout [ 71.411210] Bluetooth: hci3: command tx timeout [ 71.411695] Bluetooth: hci7: command tx timeout [ 71.412078] Bluetooth: hci4: command tx timeout [ 73.201900] Bluetooth: hci0: command tx timeout [ 73.330492] Bluetooth: hci1: command tx timeout [ 73.394078] Bluetooth: hci2: command tx timeout [ 73.457523] Bluetooth: hci4: command tx timeout [ 73.457945] Bluetooth: hci3: command tx timeout [ 73.458299] Bluetooth: hci5: command tx timeout [ 73.459053] Bluetooth: hci7: command tx timeout [ 73.459464] Bluetooth: hci6: command tx timeout [ 75.250376] Bluetooth: hci0: command tx timeout [ 75.377525] Bluetooth: hci1: command tx timeout [ 75.442521] Bluetooth: hci2: command tx timeout [ 75.505412] Bluetooth: hci6: command tx timeout [ 75.505462] Bluetooth: hci7: command tx timeout [ 75.505852] Bluetooth: hci3: command tx timeout [ 75.506284] Bluetooth: hci4: command tx timeout [ 75.506767] Bluetooth: hci5: command tx timeout [ 77.298364] Bluetooth: hci0: command tx timeout [ 77.425469] Bluetooth: hci1: command tx timeout [ 77.492370] Bluetooth: hci2: command tx timeout [ 77.553501] Bluetooth: hci4: command tx timeout [ 77.553588] Bluetooth: hci3: command tx timeout [ 77.554685] Bluetooth: hci5: command tx timeout [ 77.554703] Bluetooth: hci7: command tx timeout [ 77.554716] Bluetooth: hci6: command tx timeout [ 102.487599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.488263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.628717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.629354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.731118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.731857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.787735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.788393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.861665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.862279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.876141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.876800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.933914] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002e: 0000 [#1] SMP KASAN NOPTI [ 102.933973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.934829] KASAN: null-ptr-deref in range [0x0000000000000170-0x0000000000000177] [ 102.934844] CPU: 1 UID: 0 PID: 3871 Comm: syz-executor.1 Not tainted 6.18.0-rc5-next-20251112 #1 PREEMPT(voluntary) [ 102.934861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 102.934869] RIP: 0010:nsproxy_free+0x28a/0x5a0 [ 102.935479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.936052] Code: 02 00 00 4c 8b 65 28 4d 85 e4 74 43 e8 4f 47 30 00 49 8d bc 24 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f7 02 00 00 49 8b 9c 24 78 01 00 00 bf 08 00 00 [ 102.941719] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 102.941746] RSP: 0018:ffff8880168879f8 EFLAGS: 00010217 [ 102.944760] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc90007e4c000 [ 102.945585] RDX: 000000000000002e RSI: ffffffff81447b61 RDI: 0000000000000174 [ 102.946148] RBP: ffff88800974f4e0 R08: 0000000000000001 R09: ffffed100129d683 [ 102.946715] R10: 0000000000000002 R11: ffff88801f917420 R12: fffffffffffffffc [ 102.947274] R13: ffff8880094eb41c R14: ffffffff85cfbf20 R15: ffff88800e19bff8 [ 102.947837] FS: 00007ffac3326700(0000) GS:ffff8880e5497000(0000) knlGS:0000000000000000 [ 102.948465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.949025] CR2: 00005559c95e5970 CR3: 000000001ea21000 CR4: 0000000000350ef0 [ 102.949738] Call Trace: [ 102.949991] [ 102.950232] create_new_namespaces+0x585/0x750 [ 102.950718] copy_namespaces+0x45c/0x580 [ 102.951132] copy_process+0x26e4/0x72a0 [ 102.951580] ? lock_release+0xc8/0x290 [ 102.951985] ? __pfx_copy_process+0x10/0x10 [ 102.952447] ? __might_fault+0xe0/0x190 [ 102.952886] ? _copy_from_user+0x5b/0xd0 [ 102.953290] kernel_clone+0xea/0x7f0 [ 102.953709] ? __pfx_kernel_clone+0x10/0x10 [ 102.954175] ? __pfx_futex_wake+0x10/0x10 [ 102.954509] ? finish_task_switch.isra.0+0x201/0x840 [ 102.954919] ? lock_release+0xc8/0x290 [ 102.955236] __do_sys_clone3+0x1f5/0x280 [ 102.955566] ? __pfx___do_sys_clone3+0x10/0x10 [ 102.955941] ? __task_pid_nr_ns+0x2e/0x4f0 [ 102.956284] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.956751] ? __task_pid_nr_ns+0x1a6/0x4f0 [ 102.957200] ? xfd_validate_state+0x55/0x180 [ 102.957575] do_syscall_64+0xbf/0x430 [ 102.957999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.958529] RIP: 0033:0x7ffac5db0b19 [ 102.958931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 102.960707] RSP: 002b:00007ffac3326188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 102.961475] RAX: ffffffffffffffda RBX: 00007ffac5ec3f60 RCX: 00007ffac5db0b19 [ 102.962222] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001180 [ 102.962970] RBP: 00007ffac5e0af6d R08: 0000000000000000 R09: 0000000000000000 [ 102.963725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.964420] R13: 00007ffc47b500cf R14: 00007ffac3326300 R15: 0000000000022000 [ 102.965192] [ 102.965429] Modules linked in: [ 102.965864] ---[ end trace 0000000000000000 ]--- [ 102.966442] RIP: 0010:nsproxy_free+0x28a/0x5a0 [ 102.966925] Code: 02 00 00 4c 8b 65 28 4d 85 e4 74 43 e8 4f 47 30 00 49 8d bc 24 78 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f7 02 00 00 49 8b 9c 24 78 01 00 00 bf 08 00 00 [ 102.968909] RSP: 0018:ffff8880168879f8 EFLAGS: 00010217 [ 102.969516] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc90007e4c000 [ 102.970245] RDX: 000000000000002e RSI: ffffffff81447b61 RDI: 0000000000000174 [ 102.971053] RBP: ffff88800974f4e0 R08: 0000000000000001 R09: ffffed100129d683 [ 102.971860] R10: 0000000000000002 R11: ffff88801f917420 R12: fffffffffffffffc [ 102.972643] R13: ffff8880094eb41c R14: ffffffff85cfbf20 R15: ffff88800e19bff8 [ 102.973417] FS: 00007ffac3326700(0000) GS:ffff8880e5497000(0000) knlGS:0000000000000000 [ 102.974239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.974878] CR2: 00005559c95e5970 CR3: 000000001ea21000 CR4: 0000000000350ef0 [ 102.996817] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 102.997543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.998112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:25:33 executing program 1: r0 = getpid() clone3(&(0x7f0000001180)={0x40205000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/62, 0x3e, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x101180, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x164, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x124, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x7, 0x3f, 0x56db}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0c}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x12130953c437236a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c80)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x288, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17c}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x14, 0xfc, 0x81, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x44814}, 0x4000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80080, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x400000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x40000) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x54, r9, 0x21, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044840}, 0x4001) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/module/pcie_aspm', 0x704580, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002280)) syz_open_procfs$namespace(r1, &(0x7f00000022c0)='ns/ipc\x00') [ 103.024160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.024992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.152006] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' 18:25:33 executing program 1: r0 = getpid() clone3(&(0x7f0000001180)={0x40205000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/62, 0x3e, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x101180, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x164, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x124, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x7, 0x3f, 0x56db}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0c}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x12130953c437236a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c80)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x288, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17c}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x14, 0xfc, 0x81, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x44814}, 0x4000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80080, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x400000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x40000) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x54, r9, 0x21, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044840}, 0x4001) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/module/pcie_aspm', 0x704580, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002280)) syz_open_procfs$namespace(r1, &(0x7f00000022c0)='ns/ipc\x00') [ 103.207211] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 103.210970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.211552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.243690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.244240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.246246] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' 18:25:34 executing program 1: r0 = getpid() clone3(&(0x7f0000001180)={0x40205000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/62, 0x3e, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x101180, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x164, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x124, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x7, 0x3f, 0x56db}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0c}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x12130953c437236a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c80)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x288, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17c}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x14, 0xfc, 0x81, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x44814}, 0x4000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80080, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x400000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x40000) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x54, r9, 0x21, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044840}, 0x4001) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/module/pcie_aspm', 0x704580, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002280)) syz_open_procfs$namespace(r1, &(0x7f00000022c0)='ns/ipc\x00') [ 103.308794] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 103.371792] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 103.427692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.428300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.431017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.431596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:25:34 executing program 1: r0 = getpid() clone3(&(0x7f0000001180)={0x40205000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/62, 0x3e, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x101180, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x164, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x124, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x7, 0x3f, 0x56db}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0c}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x12130953c437236a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c80)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x288, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17c}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x14, 0xfc, 0x81, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x44814}, 0x4000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80080, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x400000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x40000) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x54, r9, 0x21, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044840}, 0x4001) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/module/pcie_aspm', 0x704580, 0x8) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_open_procfs$namespace(r1, &(0x7f00000022c0)='ns/ipc\x00') [ 103.473044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.473696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.489733] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 103.553820] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 103.557406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.557982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:25:34 executing program 1: r0 = getpid() clone3(&(0x7f0000001180)={0x40205000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/62, 0x3e, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x101180, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x164, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x124, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x7, 0x3f, 0x56db}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0c}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x12130953c437236a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c80)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x288, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17c}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x14, 0xfc, 0x81, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x44814}, 0x4000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80080, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001e00), 0x400000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x40000) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x54, r9, 0x21, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044840}, 0x4001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002100)='/sys/module/pcie_aspm', 0x704580, 0x8) syz_open_procfs$namespace(r1, &(0x7f00000022c0)='ns/ipc\x00') [ 103.602270] mmap: syz-executor.2 (3906) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.638701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.639290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.719576] Bluetooth: hci7: hcon 00000000931131ed sent 1 < count 5 [ 103.720147] Bluetooth: hci7: hcon 00000000931131ed sent 0 < count 2047 [ 103.721439] Bluetooth: hci7: hcon 00000000eb88b8ee sent 1 < count 3 [ 103.721960] Bluetooth: hci7: hcon 00000000eb88b8ee sent 0 < count 4 [ 103.722522] Bluetooth: hci7: hcon 00000000931131ed sent 0 < count 32767 [ 103.728156] Bluetooth: hci7: hcon 00000000eb88b8ee sent 0 < count 40240 [ 103.734675] Bluetooth: hci7: hcon 00000000eb88b8ee sent 0 < count 32767 18:25:34 executing program 5: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r0, 0x628, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa8, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4011}, 0x48001) socketpair(0x29, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x124, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x34, 0x2a, [@measure_req={0x26, 0xe, {0x46, 0xff, 0x1, "d56cec218868b4a213cce1"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @erp={0x2a, 0x1, {0x1}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @challenge={0x10, 0x1, 0xd5}, @chsw_timing={0x68, 0x4, {0x800, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xd1, 0x60}}, @channel_switch={0x25, 0x3, {0x1, 0x65, 0xa6}}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2df}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0xa8, 0x1, @device_a, 0x80, @device_b, 0x6000000, 0x80000001, @broadcast, 0x7fff}}]}, @NL80211_ATTR_IE={0x4f, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3f, 0x8}}, @chsw_timing={0x68, 0x4, {0x7fff, 0x4}}, @dsss={0x3, 0x1, 0xa1}, @channel_switch={0x25, 0x3, {0x0, 0x2c, 0x7}}, @sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0x3, 0x29, "5d1be1d2074bd9ea05223d6c9f847b8cb09868b853ad47124269a98b7f451253a80e33819f91408a4d"}, @dsss={0x3, 0x1, 0x7}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3d8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0xc}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x41) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40400801}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8804}, 0x24044001) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000001080)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000bc0)={0x45c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x286}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff20}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x520}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001200)={'ip_vti0\x00', &(0x7f0000001100)={'gre0\x00', r8, 0x8000, 0x80e8, 0x3, 0x1, {{0x38, 0x4, 0x0, 0x0, 0xe0, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @local, {[@end, @ssrr={0x89, 0x23, 0x78, [@dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @local, @loopback, @broadcast, @remote, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x54, 0x33, 0x1, 0x3, [{@local, 0x5}, {@private=0xa010102, 0x8}, {@local, 0xbad}, {@loopback, 0xa7400000}, {@loopback, 0x3}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbef}, {@local, 0xffffffff}, {@multicast1, 0x3}]}, @cipso={0x86, 0x27, 0x2, [{0x6, 0x10, "e623911e96b2a68148fd5065590d"}, {0x2, 0x11, "558dcf06af802f589f18f130f587ac"}]}, @lsrr={0x83, 0x3, 0xf1}, @generic={0x86, 0xd, "6b85b3125d0a524077ebaa"}, @ssrr={0x89, 0xf, 0xfb, [@loopback, @empty, @rand_addr=0x64010102]}, @generic={0x81, 0xe, "0783d797855a008581555d1f"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001540)={'erspan0\x00', &(0x7f0000001480)={'syztnl1\x00', r10, 0x20, 0x10, 0x7, 0x8, {{0x1b, 0x4, 0x2, 0x3d, 0x6c, 0x66, 0x0, 0xf8, 0x29, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x49, 0x3, [{0x5, 0xe, "d1a52cc3e91c21ab6e0a8058"}, {0x0, 0xf, "e77abe02baf9e15ed2cd4b4024"}, {0x4, 0x6, "a5784382"}, {0x2, 0xe, "8dca7e1a55585d398ac3f53b"}, {0x0, 0xc, "76be5cc1ae006822a8dc"}, {0x89e2bd63874552dd, 0x2}, {0x5, 0x4, "f631"}]}, @end, @timestamp={0x44, 0xc, 0x66, 0x0, 0x8, [0x2, 0x20]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000002580)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002540)={&(0x7f0000001a80)={0xaa0, 0x0, 0x103, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xdd7a, 0x4, 0x6, 0x9}, {0x5, 0x1, 0x9, 0x1}, {0x86, 0x80, 0x7, 0x200}, {0x3, 0x1, 0x1, 0xff}, {0x1, 0xff, 0x3f, 0x1000}, {0x7, 0x3, 0x8, 0x4}, {0x7, 0xff, 0x2, 0x4}, {0x7, 0x9, 0x7a, 0xff}, {0x1000, 0x3f, 0x2, 0x368}, {0x6, 0x8, 0x1, 0x20}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r12}, {0x208, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x5, 0x80}, {0x70, 0x1, 0x0, 0x7}, {0xff80, 0x0, 0x1, 0x2}, {0x3f, 0x1, 0x7, 0x9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc22}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r7}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x38}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb4ab}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xd4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x14, 0x1f, 0x91d2}, {0x3, 0x1, 0xb3, 0x1b1}, {0x5, 0x8, 0xc7, 0x2}, {0x0, 0x7, 0x4, 0x2}, {0x48, 0x80, 0x7, 0x60d}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x40810}, 0xddcc646f086e42e1) [ 103.739570] Bluetooth: hci7: hcon 00000000931131ed sent 0 < count 2048 [ 103.756893] Bluetooth: hci7: hcon 00000000931131ed sent 0 < count 5 18:25:34 executing program 4: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x100010, 0xffffffffffffffff, 0x10000000) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x20, 0xb26, 0x20, 0x3f}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x24000040) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1c0, r0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x400, 0x20, 0x6, 0x2, 0x5, 0x1000]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x7}, {0x6, 0x2}, {0x3, 0x7}, {}, {0x3, 0x3}, {0x3, 0x8}, {0x5, 0x5}, {}, {0x2, 0x8}, {0x0, 0xa}, {0x1}, {0x7, 0x5}, {0x7, 0x6}, {0x3, 0x7}, {}, {0x2, 0x4}, {0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x5}, {0x2, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x4, 0x24, 0x60, 0x2, 0x9, 0x9, 0x48, 0x6c, 0x18, 0x6, 0x48, 0x16, 0x43, 0x30, 0x18, 0x18, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x4, 0x48, 0x5, 0x16, 0x6, 0x5, 0x1, 0x36, 0x18, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x6, 0xfff9, 0xff, 0x0, 0x3f0, 0x13]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x2}, {0x0, 0x8}, {0x2, 0x7}, {0x6}, {0x5, 0x5}, {0x5, 0x4}, {}, {0x6}, {0x0, 0x9}, {0x5}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x8}, {0x1, 0x6}, {0x7, 0x1}, {0x7}, {0x0, 0x5}, {0x1}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x4}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x4, 0xa}, {0x5, 0x7}, {0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x6, 0x6, 0x6, 0x2, 0x16, 0x6c, 0x18, 0x2, 0x30, 0x6c, 0x48, 0x12, 0x12, 0xc, 0x18, 0xb, 0x1b, 0x3]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x30, 0x16, 0x9, 0x4, 0xc, 0x12, 0x30, 0x36, 0x12, 0xc, 0x5, 0xc, 0x2, 0x36, 0x60, 0x12, 0x6c, 0x4, 0x6, 0x16, 0x1b, 0x18, 0x5, 0x4, 0x5, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x0, 0x9, 0x200, 0x200, 0xfe00, 0x2, 0xd30]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x6c, 0x6, 0x60, 0x16, 0x5, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x583, 0x9, 0x7, 0x7f, 0x3, 0x100, 0x5, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x7, 0x3, 0xc, 0x3, 0x6, 0x4, 0x0, 0x0, 0x30, 0x1b, 0x24, 0x0, 0x46, 0x48, 0x1b, 0x18, 0x48, 0x30, 0x4, 0x1, 0x9, 0x2, 0x5, 0x2, 0x60, 0x2]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x5, 0x8}, {}, {0x5, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x5}, {}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x2}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x5}, {0x0, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) clone3(&(0x7f0000000780)={0x100, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0, {0x1c}, &(0x7f0000000580)=""/202, 0xca, &(0x7f0000000680)=""/191, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r1}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x67}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004055) socketpair(0x10, 0x800, 0xfffffffe, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000a40)="be015434eaa67a12b088e9fe2eaa34fa99a5071a6a6880fb852e072df522221cdf50820d13bb245b44493250fd281125be0205aaf4512ef3bb38f8beb5e1bd68e1d393244b568b7d8681eee0e76f8642df0f35b36d02855634f4ff5d67bff51e238b195512fbaad3d4d321a6f2ca6a086ce1") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'erspan0\x00', 0x0, 0x20, 0x80, 0x200, 0x80000000, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x65, 0x0, 0x71, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0x85, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @local]}, @lsrr={0x83, 0x17, 0x9c, [@multicast2, @broadcast, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0xc8, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000d40)={'ip_vti0\x00', &(0x7f0000000cc0)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x6, 0xde16, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x5, [{@local, 0xc6f}]}, @lsrr={0x83, 0x17, 0xcd, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x6, 0x0}, @multicast2]}, @lsrr={0x83, 0x17, 0xc, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x5f, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c0c8}, 0x0) r9 = openat$cgroup_ro(r1, &(0x7f0000000ec0)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}}, 0x20040000) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x78}}}}, ["", "", "", "", ""]}, 0x28}}, 0x0) [ 103.757742] Bluetooth: hci7: hcon 00000000931131ed sent 0 < count 2047 [ 103.758720] Bluetooth: hci7: hcon 00000000eb88b8ee sent 0 < count 3 [ 103.759221] Bluetooth: hci7: hcon 00000000eb88b8ee sent 0 < count 4 [ 103.759732] Bluetooth: hci7: hcon 00000000931131ed sent 0 < count 32767 [ 103.764679] Bluetooth: hci7: hcon 00000000eb88b8ee sent 0 < count 40240 [ 103.770494] Bluetooth: hci7: hcon 00000000eb88b8ee sent 0 < count 32767 [ 103.775365] Bluetooth: hci7: hcon 00000000931131ed sent 0 < count 2048 18:25:34 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88004010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x4, 0x1}, @nl=@unspec, @nfc={0x27, 0x1, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x5668, &(0x7f0000000240)='sit0\x00', 0x6, 0x10001, 0x2}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44051}, 0x20040040) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}]}, 0x94}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/slab_common', 0x1c1080, 0xb) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) r6 = openat$cgroup_ro(r4, &(0x7f0000000840)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004}, 0x4045) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x145af7effba43b19}, 0x10) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x4, 0x1000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2bc, r7, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x7c}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x1, 0x4, 0x0, {0x100000001, 0x1762, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x5}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x1, 0x0, {0x9, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x5, 0x1f}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9c}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1f}]}, @NL80211_ATTR_HIDDEN_SSID={0x24, 0x7e, @random="66b5b5437880fc9e54ca3ab4565748c1667fc3ae387c58697a01a4f78ef9b365"}, @NL80211_ATTR_KEYS={0x204, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2eea7dcd68"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "a42c4bb2c66dc255275f71dd61c1"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a255401dd9e291d535256716a7"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d260f1e03560270cf2936ab1c0"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5e83b8b458ed4c9dec0a992f2f"}, @NL80211_KEY_SEQ={0x10, 0x4, "42c4727ca6e778a352938dea"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "73f58a693197b41f4b4a84c78c"}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x14, 0x4, "4c3f9d323b7b354c98d2987b477b024e"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dbe843b559"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "616cdd334fea03f3630dc353b3"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "71f97adc0f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e012b320f4f83b78cf06cd85be"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "f0169c0f"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c10a1a0841eecedb8890c080ce"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) VM DIAGNOSIS: 18:25:33 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82930d95 RDI=ffffffff8896b7c0 RBP=ffffffff8896b780 RSP=ffff88800a4cf4b8 R8 =0000000000000000 R9 =ffffed100161e046 R10=0000000000000020 R11=552031203a555043 R12=0000000000000020 R13=0000000000000010 R14=ffffffff8896b780 R15=ffffffff82930d80 RIP=ffffffff82930ded RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5397000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d62055260 CR3=000000001fbf5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffffff00ffff0000 XMM02=ffffffffffffff00ffff000000000000 XMM03=ffff0000000000000000000000000000 XMM04=0000ffffff00ffff0000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000040000 RBX=1ffff11002d10ebe RCX=ffffc90007e4c000 RDX=0000000000040000 RSI=ffffffff81552dad RDI=0000000000000001 RBP=0000000000000001 RSP=ffff8880168875e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=00000000000000c7 R13=0000000000000000 R14=ffff88800a40b780 R15=ffff8880168876c8 RIP=ffffffff81552daf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffac3326700 00000000 00000000 GS =0000 ffff8880e5497000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005559c95e5970 CR3=000000001ea21000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000