Warning: Permanently added '[localhost]:38384' (ECDSA) to the list of known hosts. 2022/10/02 17:34:39 fuzzer started 2022/10/02 17:34:39 dialing manager at localhost:35095 syzkaller login: [ 44.636835] cgroup: Unknown subsys name 'net' [ 44.769103] cgroup: Unknown subsys name 'rlimit' 2022/10/02 17:34:53 syscalls: 201 2022/10/02 17:34:53 code coverage: enabled 2022/10/02 17:34:53 comparison tracing: enabled 2022/10/02 17:34:53 extra coverage: enabled 2022/10/02 17:34:53 setuid sandbox: enabled 2022/10/02 17:34:53 namespace sandbox: enabled 2022/10/02 17:34:53 Android sandbox: enabled 2022/10/02 17:34:53 fault injection: enabled 2022/10/02 17:34:53 leak checking: enabled 2022/10/02 17:34:53 net packet injection: enabled 2022/10/02 17:34:53 net device setup: enabled 2022/10/02 17:34:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 17:34:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 17:34:53 USB emulation: enabled 2022/10/02 17:34:53 hci packet injection: enabled 2022/10/02 17:34:53 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 17:34:53 802.15.4 emulation: enabled 2022/10/02 17:34:53 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 17:34:55 starting 8 fuzzer processes 17:34:55 executing program 0: sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @random="2f9b4806e99b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) socketpair(0x21, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x1, 0x2, 0x34, @mcast1, @empty, 0x700, 0x20, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2fa191c58f192944, 0x19, 0x40, 0x3f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x7fff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0xcf, 0x76, 0x101, 0x44, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7800, 0x81, 0xc29a}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x4, 0xba, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x80, 0x5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x8000, 0x3ff, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x80, 0x7f, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8000, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x9, 0x50, @mcast1, @mcast1, 0x8000, 0x8000, 0x0, 0xbc62}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000c80)={0x8a8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x6, 0x81, 0x2}, {0xe000, 0x20, 0x7, 0x4}, {0x1, 0xf8, 0x3, 0xbb96}, {0x5, 0x0, 0x1f, 0x8}, {0x0, 0x2, 0x81, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb7c0ba3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xab7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc26}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0x5, 0x80, 0xe862}, {0x0, 0x80, 0x97, 0x69}, {0x9, 0x2, 0x20, 0x1}, {0x0, 0xf4, 0xf, 0x9}, {0x5, 0x26, 0x4, 0x9}, {0x100, 0x3f, 0x4, 0x20}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x7, 0x7, 0xc9}, {0x6, 0x3, 0x7f}, {0x100, 0x81, 0xe0}, {0x5, 0x1, 0x2, 0xb9}, {0x7c, 0x0, 0x9, 0x1}, {0x15, 0x2, 0x3f, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x80, 0x4, 0x2}, {0xff, 0x3, 0x80, 0xdbd}, {0x3, 0xce, 0x3, 0x7}, {0x1ff, 0x3, 0x3}, {0xff, 0x6, 0x7f}, {0x0, 0x80, 0x4, 0x8}, {0x3f, 0x2, 0x0, 0x7f}, {0x6, 0x7, 0x7f, 0xffff}, {0x9, 0x2, 0x3, 0xfffffffe}, {0x7, 0xc3, 0x1, 0xfffffff8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x40}, 0x6002001) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/boot_params', 0x2a00, 0x41) ioctl$MON_IOCX_MFETCH(r11, 0xc0109207, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x400}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'sit0\x00', r9, 0x2f, 0x7f, 0x0, 0x1, 0x0, @local, @empty, 0x20, 0x700, 0x5, 0x3}}) sendmsg$NL80211_CMD_SET_WDS_PEER(r11, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x80, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="614a70cf58d2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c8cb186d499b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004000}, 0x200440c1) fchmodat(r11, &(0x7f0000001880)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', r11, &(0x7f0000001940)='./file0\x00', 0x4) 17:34:55 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r9, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x58}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6gre0\x00', r6, 0x2f, 0x3f, 0x40, 0x3ff, 0x22, @mcast1, @loopback, 0x1c8, 0x8000, 0xf6, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f0000001b00)={0xb34, 0x0, 0x304, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x270, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x71}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xfb, 0xf8, 0xffffffff}, {0x1, 0x5, 0x1f, 0x10000}, {0x400, 0x4f, 0x2, 0xfffffff7}, {0x65, 0x3, 0x4}, {0x394, 0x5, 0x5, 0x9}, {0x40, 0x5, 0x2, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a9332d3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8001, 0x5, 0x40, 0x9}, {0x5, 0x80, 0x7f, 0x7ff}, {0xdcfc, 0x9, 0x5, 0x400}, {0xa962, 0x2, 0x6, 0x3f}, {0x9bf, 0x8, 0x0, 0x3}, {0x3, 0x6, 0x6, 0x10001}, {0x8, 0x3, 0xff, 0x5}, {0x4, 0x8, 0x9, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x248}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0xfe, 0x40, 0x80000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x9, 0x80, 0x5}, {0x5, 0x2, 0x7f, 0x8}, {0x5, 0x7, 0x10, 0x7}, {0x101, 0x81, 0x7f}, {0x7f, 0x5, 0x4, 0x8000}, {0xd2, 0x8, 0x5, 0x5b7}, {0x3, 0x3f, 0x4, 0x3ff}]}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x7, 0x5, 0x6}, {0x9, 0x5, 0x7f, 0x5}, {0x1ff, 0x8, 0x1, 0x10000000}, {0x3f, 0x80, 0x8, 0x8}, {0x0, 0x81, 0x3, 0x5}, {0x1ff, 0x7f, 0x2, 0x6303}, {0x400, 0xd5, 0x5, 0x10001}]}}}]}}]}, 0xb34}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) 17:34:55 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000000)) getpgrp(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000140)={0x9}) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/user\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f0000000800)) write$rfkill(0xffffffffffffffff, &(0x7f0000000840)={0x3f, 0x20, 0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', r2, 0x4, 0x53, 0x0, 0x7, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x20, 0x1, 0xb74}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', r2, 0x29, 0x6, 0x91, 0x6, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl1\x00', r2, 0x2, 0x7, 0x1, 0x7ff, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x8, 0xacc0, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001440)={0x6c0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1af}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd02}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x160, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x45, 0x9, 0x5}, {0x9, 0x0, 0x8, 0x4}, {0x8, 0x2, 0x6, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x51a}}, {0x8, 0x6, r9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xbf6e, 0xb8, 0xff, 0x6}, {0x0, 0x6, 0x4, 0x7}, {0x1000, 0x81, 0x1f, 0x20f}, {0x6, 0x1f, 0x0, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x64d}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x6, 0xc0, 0x9}, {0x8, 0x3, 0x80, 0x3}, {0x0, 0x80, 0x8f, 0x80000000}, {0x5, 0x0, 0x7, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x8e4}, 0x4000010) 17:34:55 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:34:55 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x200000, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000) socketpair(0x10, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x11, 0x8}, {0xfffb, 0x80, 0x6, 0x80000000}, {0xfff, 0xcd, 0xbd, 0x7}, {0x9, 0xdd, 0x81, 0xf17}, {0x5, 0x2, 0x40, 0xfffff800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x0, 0x9, 0x1}, {0x8, 0x7, 0x0, 0x80}, {0x7fff, 0x8, 0xff, 0x5}, {0x9, 0x2, 0x0, 0x10000}]}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x2, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x7, 0x6, 0x4e1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x40, 0x4, @loopback, @local, 0x7800, 0x7800, 0x4, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001840)={&(0x7f0000001100)={0x730, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0x9, 0x80, 0x2}, {0x9, 0x20, 0x6, 0x80000001}, {0x6, 0x6, 0x8, 0x2}, {0x5, 0x6, 0x20, 0xbe3}, {0x8, 0xb8, 0x8}, {0x6, 0x2, 0x0, 0x2}, {0x2, 0x9, 0x20, 0x5b346ad1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x7f, 0x0, 0x4}, {0x101, 0x5, 0x7, 0x8}]}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x44090}, 0x20000091) 17:34:55 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/20, 0x14}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0], 0x1, 0x4}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', r2, 0x2f, 0xcd, 0x2, 0x8, 0x20, @remote, @mcast1, 0x40, 0x20, 0x5, 0x3}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) [ 59.521805] audit: type=1400 audit(1664732095.362:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:34:55 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000a80)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d80)={0x74, 0x0, &(0x7f0000000c80)=[@free_buffer, @enter_looper, @dead_binder_done, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000bc0)={@ptr={0x70742a85, 0x1, &(0x7f0000000ac0)=""/200, 0xc8, 0x0, 0x2a}, @fda={0x66646185, 0x7, 0x0, 0xd}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000c40)={0x0, 0x28, 0x48}}}], 0x56, 0x0, &(0x7f0000000d00)="b144c884b677b87e4f14c5dfb107c261c154a32653edf0f7c775a17be33e3ed6e96271d3021509c28058db55a453dbac64aa6971a50110b6373ba6a615ef13b1c246f70b009e7be26586684bfadd11a78ffa2c3fd5c8"}) 17:34:55 executing program 7: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x20000030) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "16d7a34cf52253bfa1bad4f633d05af4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x40}}, 0x4002000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x300, 0x401, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4004040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/mac80211', 0x260000, 0xc0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x10, 0x5, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7800, 0x8000, 0x2, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4c001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_print_times', 0x250400, 0x82) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r4, 0x4, 0x9, 0x7, 0x1, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x8001, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0x1f, 0x101, 0x55, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1ec, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1d0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x5b, 0x64, 0x1}, {0xe788, 0x0, 0x80, 0x6}, {0x4, 0x16, 0x20, 0x1}, {0x39, 0x0, 0x80}, {0x7, 0x7f, 0x6, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001400)={&(0x7f0000001300), 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x168, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) [ 60.763668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.765552] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.767565] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.770946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.772822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.774215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.781062] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.887018] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.889866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.892426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.898855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.900907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.902806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.904290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.905812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.909901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.911205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.913511] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.914712] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.916113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.917497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.922362] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.956686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.958485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.960015] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.963807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.981573] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.982892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.990212] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.003606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.004944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.008559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.008650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.012599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.019490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.021123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.025057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.025078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.030634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.030825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.038811] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.044020] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.846764] Bluetooth: hci0: command 0x0409 tx timeout [ 62.973726] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 62.973845] Bluetooth: hci2: command 0x0409 tx timeout [ 62.975016] Bluetooth: hci4: command 0x0409 tx timeout [ 62.975148] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 63.038450] Bluetooth: hci1: command 0x0409 tx timeout [ 63.101419] Bluetooth: hci3: command 0x0409 tx timeout [ 63.102091] Bluetooth: hci5: command 0x0409 tx timeout [ 64.893377] Bluetooth: hci0: command 0x041b tx timeout [ 65.021464] Bluetooth: hci2: command 0x041b tx timeout [ 65.021941] Bluetooth: hci4: command 0x041b tx timeout [ 65.086418] Bluetooth: hci1: command 0x041b tx timeout [ 65.150374] Bluetooth: hci5: command 0x041b tx timeout [ 65.150817] Bluetooth: hci3: command 0x041b tx timeout [ 65.601155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.603885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.604901] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.607614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.609685] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.611071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.613938] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.942359] Bluetooth: hci0: command 0x040f tx timeout [ 67.070428] Bluetooth: hci4: command 0x040f tx timeout [ 67.071032] Bluetooth: hci2: command 0x040f tx timeout [ 67.134405] Bluetooth: hci1: command 0x040f tx timeout [ 67.198427] Bluetooth: hci3: command 0x040f tx timeout [ 67.199022] Bluetooth: hci5: command 0x040f tx timeout [ 67.646388] Bluetooth: hci6: command 0x0409 tx timeout [ 67.709443] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 68.990366] Bluetooth: hci0: command 0x0419 tx timeout [ 69.117374] Bluetooth: hci2: command 0x0419 tx timeout [ 69.117838] Bluetooth: hci4: command 0x0419 tx timeout [ 69.182423] Bluetooth: hci1: command 0x0419 tx timeout [ 69.245459] Bluetooth: hci5: command 0x0419 tx timeout [ 69.245931] Bluetooth: hci3: command 0x0419 tx timeout [ 69.693365] Bluetooth: hci6: command 0x041b tx timeout [ 71.742426] Bluetooth: hci6: command 0x040f tx timeout [ 72.125359] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 73.789357] Bluetooth: hci6: command 0x0419 tx timeout [ 74.592942] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.595022] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.595888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.597979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.598849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.600140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.602900] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.605399] Bluetooth: hci7: command 0x0409 tx timeout [ 78.654428] Bluetooth: hci7: command 0x041b tx timeout [ 80.702464] Bluetooth: hci7: command 0x040f tx timeout [ 82.750559] Bluetooth: hci7: command 0x0419 tx timeout 17:35:46 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:35:47 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:35:47 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:35:47 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000a80)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d80)={0x74, 0x0, &(0x7f0000000c80)=[@free_buffer, @enter_looper, @dead_binder_done, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000bc0)={@ptr={0x70742a85, 0x1, &(0x7f0000000ac0)=""/200, 0xc8, 0x0, 0x2a}, @fda={0x66646185, 0x7, 0x0, 0xd}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000c40)={0x0, 0x28, 0x48}}}], 0x56, 0x0, &(0x7f0000000d00)="b144c884b677b87e4f14c5dfb107c261c154a32653edf0f7c775a17be33e3ed6e96271d3021509c28058db55a453dbac64aa6971a50110b6373ba6a615ef13b1c246f70b009e7be26586684bfadd11a78ffa2c3fd5c8"}) 17:35:47 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000a80)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d80)={0x74, 0x0, &(0x7f0000000c80)=[@free_buffer, @enter_looper, @dead_binder_done, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000bc0)={@ptr={0x70742a85, 0x1, &(0x7f0000000ac0)=""/200, 0xc8, 0x0, 0x2a}, @fda={0x66646185, 0x7, 0x0, 0xd}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000c40)={0x0, 0x28, 0x48}}}], 0x56, 0x0, &(0x7f0000000d00)="b144c884b677b87e4f14c5dfb107c261c154a32653edf0f7c775a17be33e3ed6e96271d3021509c28058db55a453dbac64aa6971a50110b6373ba6a615ef13b1c246f70b009e7be26586684bfadd11a78ffa2c3fd5c8"}) 17:35:47 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:35:48 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000a80)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d80)={0x74, 0x0, &(0x7f0000000c80)=[@free_buffer, @enter_looper, @dead_binder_done, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000bc0)={@ptr={0x70742a85, 0x1, &(0x7f0000000ac0)=""/200, 0xc8, 0x0, 0x2a}, @fda={0x66646185, 0x7, 0x0, 0xd}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000c40)={0x0, 0x28, 0x48}}}], 0x56, 0x0, &(0x7f0000000d00)="b144c884b677b87e4f14c5dfb107c261c154a32653edf0f7c775a17be33e3ed6e96271d3021509c28058db55a453dbac64aa6971a50110b6373ba6a615ef13b1c246f70b009e7be26586684bfadd11a78ffa2c3fd5c8"}) 17:35:48 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r9, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x58}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6gre0\x00', r6, 0x2f, 0x3f, 0x40, 0x3ff, 0x22, @mcast1, @loopback, 0x1c8, 0x8000, 0xf6, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f0000001b00)={0xb34, 0x0, 0x304, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x270, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x71}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xfb, 0xf8, 0xffffffff}, {0x1, 0x5, 0x1f, 0x10000}, {0x400, 0x4f, 0x2, 0xfffffff7}, {0x65, 0x3, 0x4}, {0x394, 0x5, 0x5, 0x9}, {0x40, 0x5, 0x2, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a9332d3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8001, 0x5, 0x40, 0x9}, {0x5, 0x80, 0x7f, 0x7ff}, {0xdcfc, 0x9, 0x5, 0x400}, {0xa962, 0x2, 0x6, 0x3f}, {0x9bf, 0x8, 0x0, 0x3}, {0x3, 0x6, 0x6, 0x10001}, {0x8, 0x3, 0xff, 0x5}, {0x4, 0x8, 0x9, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x248}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0xfe, 0x40, 0x80000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x9, 0x80, 0x5}, {0x5, 0x2, 0x7f, 0x8}, {0x5, 0x7, 0x10, 0x7}, {0x101, 0x81, 0x7f}, {0x7f, 0x5, 0x4, 0x8000}, {0xd2, 0x8, 0x5, 0x5b7}, {0x3, 0x3f, 0x4, 0x3ff}]}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x7, 0x5, 0x6}, {0x9, 0x5, 0x7f, 0x5}, {0x1ff, 0x8, 0x1, 0x10000000}, {0x3f, 0x80, 0x8, 0x8}, {0x0, 0x81, 0x3, 0x5}, {0x1ff, 0x7f, 0x2, 0x6303}, {0x400, 0xd5, 0x5, 0x10001}]}}}]}}]}, 0xb34}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) [ 114.432089] audit: type=1326 audit(1664732150.272:7): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3886 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1c620b19 code=0x0 [ 115.285027] audit: type=1326 audit(1664732151.125:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3886 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1c620b19 code=0x0 17:36:09 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:36:09 executing program 0: sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @random="2f9b4806e99b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) socketpair(0x21, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x1, 0x2, 0x34, @mcast1, @empty, 0x700, 0x20, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2fa191c58f192944, 0x19, 0x40, 0x3f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x7fff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0xcf, 0x76, 0x101, 0x44, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7800, 0x81, 0xc29a}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x4, 0xba, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x80, 0x5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x8000, 0x3ff, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x80, 0x7f, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8000, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x9, 0x50, @mcast1, @mcast1, 0x8000, 0x8000, 0x0, 0xbc62}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000c80)={0x8a8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x6, 0x81, 0x2}, {0xe000, 0x20, 0x7, 0x4}, {0x1, 0xf8, 0x3, 0xbb96}, {0x5, 0x0, 0x1f, 0x8}, {0x0, 0x2, 0x81, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb7c0ba3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xab7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc26}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0x5, 0x80, 0xe862}, {0x0, 0x80, 0x97, 0x69}, {0x9, 0x2, 0x20, 0x1}, {0x0, 0xf4, 0xf, 0x9}, {0x5, 0x26, 0x4, 0x9}, {0x100, 0x3f, 0x4, 0x20}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x7, 0x7, 0xc9}, {0x6, 0x3, 0x7f}, {0x100, 0x81, 0xe0}, {0x5, 0x1, 0x2, 0xb9}, {0x7c, 0x0, 0x9, 0x1}, {0x15, 0x2, 0x3f, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x80, 0x4, 0x2}, {0xff, 0x3, 0x80, 0xdbd}, {0x3, 0xce, 0x3, 0x7}, {0x1ff, 0x3, 0x3}, {0xff, 0x6, 0x7f}, {0x0, 0x80, 0x4, 0x8}, {0x3f, 0x2, 0x0, 0x7f}, {0x6, 0x7, 0x7f, 0xffff}, {0x9, 0x2, 0x3, 0xfffffffe}, {0x7, 0xc3, 0x1, 0xfffffff8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x40}, 0x6002001) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/boot_params', 0x2a00, 0x41) ioctl$MON_IOCX_MFETCH(r11, 0xc0109207, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x400}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'sit0\x00', r9, 0x2f, 0x7f, 0x0, 0x1, 0x0, @local, @empty, 0x20, 0x700, 0x5, 0x3}}) sendmsg$NL80211_CMD_SET_WDS_PEER(r11, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x80, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="614a70cf58d2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c8cb186d499b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004000}, 0x200440c1) fchmodat(r11, &(0x7f0000001880)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', r11, &(0x7f0000001940)='./file0\x00', 0x4) 17:36:09 executing program 7: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x20000030) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "16d7a34cf52253bfa1bad4f633d05af4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x40}}, 0x4002000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x300, 0x401, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4004040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/mac80211', 0x260000, 0xc0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x10, 0x5, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7800, 0x8000, 0x2, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4c001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_print_times', 0x250400, 0x82) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r4, 0x4, 0x9, 0x7, 0x1, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x8001, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0x1f, 0x101, 0x55, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1ec, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1d0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x5b, 0x64, 0x1}, {0xe788, 0x0, 0x80, 0x6}, {0x4, 0x16, 0x20, 0x1}, {0x39, 0x0, 0x80}, {0x7, 0x7f, 0x6, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001400)={&(0x7f0000001300), 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x168, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 17:36:09 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000a80)) 17:36:09 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000000)) getpgrp(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000140)={0x9}) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/user\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f0000000800)) write$rfkill(0xffffffffffffffff, &(0x7f0000000840)={0x3f, 0x20, 0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', r2, 0x4, 0x53, 0x0, 0x7, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x20, 0x1, 0xb74}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', r2, 0x29, 0x6, 0x91, 0x6, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl1\x00', r2, 0x2, 0x7, 0x1, 0x7ff, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x8, 0xacc0, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001440)={0x6c0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1af}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd02}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x160, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x45, 0x9, 0x5}, {0x9, 0x0, 0x8, 0x4}, {0x8, 0x2, 0x6, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x51a}}, {0x8, 0x6, r9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xbf6e, 0xb8, 0xff, 0x6}, {0x0, 0x6, 0x4, 0x7}, {0x1000, 0x81, 0x1f, 0x20f}, {0x6, 0x1f, 0x0, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x64d}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x6, 0xc0, 0x9}, {0x8, 0x3, 0x80, 0x3}, {0x0, 0x80, 0x8f, 0x80000000}, {0x5, 0x0, 0x7, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x8e4}, 0x4000010) 17:36:09 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x200000, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000) socketpair(0x10, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x11, 0x8}, {0xfffb, 0x80, 0x6, 0x80000000}, {0xfff, 0xcd, 0xbd, 0x7}, {0x9, 0xdd, 0x81, 0xf17}, {0x5, 0x2, 0x40, 0xfffff800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x0, 0x9, 0x1}, {0x8, 0x7, 0x0, 0x80}, {0x7fff, 0x8, 0xff, 0x5}, {0x9, 0x2, 0x0, 0x10000}]}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x2, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x7, 0x6, 0x4e1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x40, 0x4, @loopback, @local, 0x7800, 0x7800, 0x4, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001840)={&(0x7f0000001100)={0x730, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0x9, 0x80, 0x2}, {0x9, 0x20, 0x6, 0x80000001}, {0x6, 0x6, 0x8, 0x2}, {0x5, 0x6, 0x20, 0xbe3}, {0x8, 0xb8, 0x8}, {0x6, 0x2, 0x0, 0x2}, {0x2, 0x9, 0x20, 0x5b346ad1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x7f, 0x0, 0x4}, {0x101, 0x5, 0x7, 0x8}]}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x44090}, 0x20000091) 17:36:09 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/20, 0x14}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0], 0x1, 0x4}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', r2, 0x2f, 0xcd, 0x2, 0x8, 0x20, @remote, @mcast1, 0x40, 0x20, 0x5, 0x3}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:09 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r9, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x58}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6gre0\x00', r6, 0x2f, 0x3f, 0x40, 0x3ff, 0x22, @mcast1, @loopback, 0x1c8, 0x8000, 0xf6, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f0000001b00)={0xb34, 0x0, 0x304, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x270, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x71}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xfb, 0xf8, 0xffffffff}, {0x1, 0x5, 0x1f, 0x10000}, {0x400, 0x4f, 0x2, 0xfffffff7}, {0x65, 0x3, 0x4}, {0x394, 0x5, 0x5, 0x9}, {0x40, 0x5, 0x2, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a9332d3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8001, 0x5, 0x40, 0x9}, {0x5, 0x80, 0x7f, 0x7ff}, {0xdcfc, 0x9, 0x5, 0x400}, {0xa962, 0x2, 0x6, 0x3f}, {0x9bf, 0x8, 0x0, 0x3}, {0x3, 0x6, 0x6, 0x10001}, {0x8, 0x3, 0xff, 0x5}, {0x4, 0x8, 0x9, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x248}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0xfe, 0x40, 0x80000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x9, 0x80, 0x5}, {0x5, 0x2, 0x7f, 0x8}, {0x5, 0x7, 0x10, 0x7}, {0x101, 0x81, 0x7f}, {0x7f, 0x5, 0x4, 0x8000}, {0xd2, 0x8, 0x5, 0x5b7}, {0x3, 0x3f, 0x4, 0x3ff}]}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x7, 0x5, 0x6}, {0x9, 0x5, 0x7f, 0x5}, {0x1ff, 0x8, 0x1, 0x10000000}, {0x3f, 0x80, 0x8, 0x8}, {0x0, 0x81, 0x3, 0x5}, {0x1ff, 0x7f, 0x2, 0x6303}, {0x400, 0xd5, 0x5, 0x10001}]}}}]}}]}, 0xb34}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) [ 134.126862] audit: type=1326 audit(1664732169.967:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4065 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1c620b19 code=0x0 17:36:09 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000a80)) 17:36:10 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/20, 0x14}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0], 0x1, 0x4}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', r2, 0x2f, 0xcd, 0x2, 0x8, 0x20, @remote, @mcast1, 0x40, 0x20, 0x5, 0x3}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:10 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000a80)) 17:36:10 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/20, 0x14}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0], 0x1, 0x4}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', r2, 0x2f, 0xcd, 0x2, 0x8, 0x20, @remote, @mcast1, 0x40, 0x20, 0x5, 0x3}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:10 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r9, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x58}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6gre0\x00', r6, 0x2f, 0x3f, 0x40, 0x3ff, 0x22, @mcast1, @loopback, 0x1c8, 0x8000, 0xf6, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f0000001b00)={0xb34, 0x0, 0x304, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x270, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x71}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0xfb, 0xf8, 0xffffffff}, {0x1, 0x5, 0x1f, 0x10000}, {0x400, 0x4f, 0x2, 0xfffffff7}, {0x65, 0x3, 0x4}, {0x394, 0x5, 0x5, 0x9}, {0x40, 0x5, 0x2, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a9332d3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8001, 0x5, 0x40, 0x9}, {0x5, 0x80, 0x7f, 0x7ff}, {0xdcfc, 0x9, 0x5, 0x400}, {0xa962, 0x2, 0x6, 0x3f}, {0x9bf, 0x8, 0x0, 0x3}, {0x3, 0x6, 0x6, 0x10001}, {0x8, 0x3, 0xff, 0x5}, {0x4, 0x8, 0x9, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x248}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0xfe, 0x40, 0x80000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x9, 0x80, 0x5}, {0x5, 0x2, 0x7f, 0x8}, {0x5, 0x7, 0x10, 0x7}, {0x101, 0x81, 0x7f}, {0x7f, 0x5, 0x4, 0x8000}, {0xd2, 0x8, 0x5, 0x5b7}, {0x3, 0x3f, 0x4, 0x3ff}]}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x7, 0x5, 0x6}, {0x9, 0x5, 0x7f, 0x5}, {0x1ff, 0x8, 0x1, 0x10000000}, {0x3f, 0x80, 0x8, 0x8}, {0x0, 0x81, 0x3, 0x5}, {0x1ff, 0x7f, 0x2, 0x6303}, {0x400, 0xd5, 0x5, 0x10001}]}}}]}}]}, 0xb34}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) 17:36:23 executing program 0: sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @random="2f9b4806e99b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) socketpair(0x21, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x1, 0x2, 0x34, @mcast1, @empty, 0x700, 0x20, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2fa191c58f192944, 0x19, 0x40, 0x3f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x7fff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0xcf, 0x76, 0x101, 0x44, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7800, 0x81, 0xc29a}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x4, 0xba, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x80, 0x5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x8000, 0x3ff, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x80, 0x7f, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8000, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x9, 0x50, @mcast1, @mcast1, 0x8000, 0x8000, 0x0, 0xbc62}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000c80)={0x8a8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x6, 0x81, 0x2}, {0xe000, 0x20, 0x7, 0x4}, {0x1, 0xf8, 0x3, 0xbb96}, {0x5, 0x0, 0x1f, 0x8}, {0x0, 0x2, 0x81, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb7c0ba3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xab7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc26}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0x5, 0x80, 0xe862}, {0x0, 0x80, 0x97, 0x69}, {0x9, 0x2, 0x20, 0x1}, {0x0, 0xf4, 0xf, 0x9}, {0x5, 0x26, 0x4, 0x9}, {0x100, 0x3f, 0x4, 0x20}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x7, 0x7, 0xc9}, {0x6, 0x3, 0x7f}, {0x100, 0x81, 0xe0}, {0x5, 0x1, 0x2, 0xb9}, {0x7c, 0x0, 0x9, 0x1}, {0x15, 0x2, 0x3f, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x80, 0x4, 0x2}, {0xff, 0x3, 0x80, 0xdbd}, {0x3, 0xce, 0x3, 0x7}, {0x1ff, 0x3, 0x3}, {0xff, 0x6, 0x7f}, {0x0, 0x80, 0x4, 0x8}, {0x3f, 0x2, 0x0, 0x7f}, {0x6, 0x7, 0x7f, 0xffff}, {0x9, 0x2, 0x3, 0xfffffffe}, {0x7, 0xc3, 0x1, 0xfffffff8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x40}, 0x6002001) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/boot_params', 0x2a00, 0x41) ioctl$MON_IOCX_MFETCH(r11, 0xc0109207, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x400}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'sit0\x00', r9, 0x2f, 0x7f, 0x0, 0x1, 0x0, @local, @empty, 0x20, 0x700, 0x5, 0x3}}) sendmsg$NL80211_CMD_SET_WDS_PEER(r11, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x80, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="614a70cf58d2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c8cb186d499b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004000}, 0x200440c1) fchmodat(r11, &(0x7f0000001880)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', r11, &(0x7f0000001940)='./file0\x00', 0x4) 17:36:23 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:36:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x200000, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000) socketpair(0x10, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x11, 0x8}, {0xfffb, 0x80, 0x6, 0x80000000}, {0xfff, 0xcd, 0xbd, 0x7}, {0x9, 0xdd, 0x81, 0xf17}, {0x5, 0x2, 0x40, 0xfffff800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x0, 0x9, 0x1}, {0x8, 0x7, 0x0, 0x80}, {0x7fff, 0x8, 0xff, 0x5}, {0x9, 0x2, 0x0, 0x10000}]}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x2, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x7, 0x6, 0x4e1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x40, 0x4, @loopback, @local, 0x7800, 0x7800, 0x4, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001840)={&(0x7f0000001100)={0x730, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0x9, 0x80, 0x2}, {0x9, 0x20, 0x6, 0x80000001}, {0x6, 0x6, 0x8, 0x2}, {0x5, 0x6, 0x20, 0xbe3}, {0x8, 0xb8, 0x8}, {0x6, 0x2, 0x0, 0x2}, {0x2, 0x9, 0x20, 0x5b346ad1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x7f, 0x0, 0x4}, {0x101, 0x5, 0x7, 0x8}]}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x44090}, 0x20000091) 17:36:23 executing program 7: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x20000030) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "16d7a34cf52253bfa1bad4f633d05af4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x40}}, 0x4002000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x300, 0x401, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4004040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/mac80211', 0x260000, 0xc0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x10, 0x5, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7800, 0x8000, 0x2, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4c001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_print_times', 0x250400, 0x82) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r4, 0x4, 0x9, 0x7, 0x1, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x8001, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0x1f, 0x101, 0x55, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1ec, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1d0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x5b, 0x64, 0x1}, {0xe788, 0x0, 0x80, 0x6}, {0x4, 0x16, 0x20, 0x1}, {0x39, 0x0, 0x80}, {0x7, 0x7f, 0x6, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001400)={&(0x7f0000001300), 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x168, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 17:36:23 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) 17:36:23 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000000)) getpgrp(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000140)={0x9}) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/user\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f0000000800)) write$rfkill(0xffffffffffffffff, &(0x7f0000000840)={0x3f, 0x20, 0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', r2, 0x4, 0x53, 0x0, 0x7, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x20, 0x1, 0xb74}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', r2, 0x29, 0x6, 0x91, 0x6, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl1\x00', r2, 0x2, 0x7, 0x1, 0x7ff, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x8, 0xacc0, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001440)={0x6c0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1af}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd02}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x160, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x45, 0x9, 0x5}, {0x9, 0x0, 0x8, 0x4}, {0x8, 0x2, 0x6, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x51a}}, {0x8, 0x6, r9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xbf6e, 0xb8, 0xff, 0x6}, {0x0, 0x6, 0x4, 0x7}, {0x1000, 0x81, 0x1f, 0x20f}, {0x6, 0x1f, 0x0, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x64d}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x6, 0xc0, 0x9}, {0x8, 0x3, 0x80, 0x3}, {0x0, 0x80, 0x8f, 0x80000000}, {0x5, 0x0, 0x7, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x8e4}, 0x4000010) 17:36:23 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r8, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r9, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x58}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6gre0\x00', r6, 0x2f, 0x3f, 0x40, 0x3ff, 0x22, @mcast1, @loopback, 0x1c8, 0x8000, 0xf6, 0x1}}) 17:36:23 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/20, 0x14}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0], 0x1, 0x4}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) [ 147.648134] audit: type=1326 audit(1664732183.488:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4132 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1c620b19 code=0x0 17:36:23 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0x8000, 0xa}) 17:36:23 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/20, 0x14}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0], 0x1, 0x4}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:23 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r8, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r9, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x60000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x58}}, 0x40000) 17:36:23 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/121, 0x79}) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:36:23 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:36:24 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/20, 0x14}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:24 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000000)) getpgrp(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000140)={0x9}) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/user\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f0000000800)) write$rfkill(0xffffffffffffffff, &(0x7f0000000840)={0x3f, 0x20, 0x0, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', r2, 0x4, 0x53, 0x0, 0x7, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x20, 0x1, 0xb74}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', r2, 0x29, 0x6, 0x91, 0x6, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl1\x00', r2, 0x2, 0x7, 0x1, 0x7ff, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x8, 0xacc0, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001440)={0x6c0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1af}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd02}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x160, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x45, 0x9, 0x5}, {0x9, 0x0, 0x8, 0x4}, {0x8, 0x2, 0x6, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x51a}}, {0x8, 0x6, r9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xbf6e, 0xb8, 0xff, 0x6}, {0x0, 0x6, 0x4, 0x7}, {0x1000, 0x81, 0x1f, 0x20f}, {0x6, 0x1f, 0x0, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x64d}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x6, 0xc0, 0x9}, {0x8, 0x3, 0x80, 0x3}, {0x0, 0x80, 0x8f, 0x80000000}, {0x5, 0x0, 0x7, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x8e4}, 0x4000010) 17:36:24 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r8, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) 17:36:35 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:36:35 executing program 7: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x20000030) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "16d7a34cf52253bfa1bad4f633d05af4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x40}}, 0x4002000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x300, 0x401, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4004040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/mac80211', 0x260000, 0xc0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x10, 0x5, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7800, 0x8000, 0x2, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4c001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_print_times', 0x250400, 0x82) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r4, 0x4, 0x9, 0x7, 0x1, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x8001, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0x1f, 0x101, 0x55, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1ec, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1d0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x5b, 0x64, 0x1}, {0xe788, 0x0, 0x80, 0x6}, {0x4, 0x16, 0x20, 0x1}, {0x39, 0x0, 0x80}, {0x7, 0x7f, 0x6, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001400)={&(0x7f0000001300), 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x168, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 17:36:35 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) ioctl$RTC_UIE_ON(r3, 0x7003) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:36:35 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000000)) getpgrp(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000140)={0x9}) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/user\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f0000000800)) write$rfkill(0xffffffffffffffff, &(0x7f0000000840)={0x3f, 0x20, 0x0, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', r2, 0x4, 0x53, 0x0, 0x7, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x20, 0x1, 0xb74}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', r2, 0x29, 0x6, 0x91, 0x6, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl1\x00', r2, 0x2, 0x7, 0x1, 0x7ff, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x8, 0xacc0, 0x1ff}}) 17:36:35 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) 17:36:35 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x200000, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000) socketpair(0x10, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x11, 0x8}, {0xfffb, 0x80, 0x6, 0x80000000}, {0xfff, 0xcd, 0xbd, 0x7}, {0x9, 0xdd, 0x81, 0xf17}, {0x5, 0x2, 0x40, 0xfffff800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x0, 0x9, 0x1}, {0x8, 0x7, 0x0, 0x80}, {0x7fff, 0x8, 0xff, 0x5}, {0x9, 0x2, 0x0, 0x10000}]}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x2, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x7, 0x6, 0x4e1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x40, 0x4, @loopback, @local, 0x7800, 0x7800, 0x4, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001840)={&(0x7f0000001100)={0x730, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0x9, 0x80, 0x2}, {0x9, 0x20, 0x6, 0x80000001}, {0x6, 0x6, 0x8, 0x2}, {0x5, 0x6, 0x20, 0xbe3}, {0x8, 0xb8, 0x8}, {0x6, 0x2, 0x0, 0x2}, {0x2, 0x9, 0x20, 0x5b346ad1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x7f, 0x0, 0x4}, {0x101, 0x5, 0x7, 0x8}]}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x44090}, 0x20000091) 17:36:35 executing program 0: sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @random="2f9b4806e99b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) socketpair(0x21, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x1, 0x2, 0x34, @mcast1, @empty, 0x700, 0x20, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2fa191c58f192944, 0x19, 0x40, 0x3f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x7fff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0xcf, 0x76, 0x101, 0x44, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7800, 0x81, 0xc29a}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x4, 0xba, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x80, 0x5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x8000, 0x3ff, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x80, 0x7f, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8000, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x9, 0x50, @mcast1, @mcast1, 0x8000, 0x8000, 0x0, 0xbc62}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000c80)={0x8a8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x6, 0x81, 0x2}, {0xe000, 0x20, 0x7, 0x4}, {0x1, 0xf8, 0x3, 0xbb96}, {0x5, 0x0, 0x1f, 0x8}, {0x0, 0x2, 0x81, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb7c0ba3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xab7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc26}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0x5, 0x80, 0xe862}, {0x0, 0x80, 0x97, 0x69}, {0x9, 0x2, 0x20, 0x1}, {0x0, 0xf4, 0xf, 0x9}, {0x5, 0x26, 0x4, 0x9}, {0x100, 0x3f, 0x4, 0x20}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x7, 0x7, 0xc9}, {0x6, 0x3, 0x7f}, {0x100, 0x81, 0xe0}, {0x5, 0x1, 0x2, 0xb9}, {0x7c, 0x0, 0x9, 0x1}, {0x15, 0x2, 0x3f, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x80, 0x4, 0x2}, {0xff, 0x3, 0x80, 0xdbd}, {0x3, 0xce, 0x3, 0x7}, {0x1ff, 0x3, 0x3}, {0xff, 0x6, 0x7f}, {0x0, 0x80, 0x4, 0x8}, {0x3f, 0x2, 0x0, 0x7f}, {0x6, 0x7, 0x7f, 0xffff}, {0x9, 0x2, 0x3, 0xfffffffe}, {0x7, 0xc3, 0x1, 0xfffffff8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x40}, 0x6002001) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/boot_params', 0x2a00, 0x41) ioctl$MON_IOCX_MFETCH(r11, 0xc0109207, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x400}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'sit0\x00', r9, 0x2f, 0x7f, 0x0, 0x1, 0x0, @local, @empty, 0x20, 0x700, 0x5, 0x3}}) sendmsg$NL80211_CMD_SET_WDS_PEER(r11, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x80, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="614a70cf58d2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c8cb186d499b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004000}, 0x200440c1) fchmodat(r11, &(0x7f0000001880)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', r11, &(0x7f0000001940)='./file0\x00', 0x4) 17:36:35 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x40, 0x81, 0x400, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x4, 0x5}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:35 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x55, 0x0, &(0x7f0000000480)="9a2425e496bcad2512121e0bee3e25c781dde157db2380312be280f27f42ad390678aad7dcf7d6ac07fc8ad664265d2574e16340947de2198897cf0123b66ce2af175b76699ccf55fe1e59628879917d538322e875"}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) [ 159.587554] audit: type=1326 audit(1664732195.427:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4234 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1c620b19 code=0x0 17:36:35 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:35 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_open_dev$rtc(&(0x7f00000008c0), 0x2, 0x535800) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:36:35 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:36:35 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:36:35 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r5, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) 17:36:35 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00') sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:48 executing program 0: sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @random="2f9b4806e99b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) socketpair(0x21, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x1, 0x2, 0x34, @mcast1, @empty, 0x700, 0x20, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2fa191c58f192944, 0x19, 0x40, 0x3f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x7fff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0xcf, 0x76, 0x101, 0x44, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7800, 0x81, 0xc29a}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x4, 0xba, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x80, 0x5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x8000, 0x3ff, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x80, 0x7f, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8000, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x9, 0x50, @mcast1, @mcast1, 0x8000, 0x8000, 0x0, 0xbc62}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000c80)={0x8a8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x6, 0x81, 0x2}, {0xe000, 0x20, 0x7, 0x4}, {0x1, 0xf8, 0x3, 0xbb96}, {0x5, 0x0, 0x1f, 0x8}, {0x0, 0x2, 0x81, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb7c0ba3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xab7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc26}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0x5, 0x80, 0xe862}, {0x0, 0x80, 0x97, 0x69}, {0x9, 0x2, 0x20, 0x1}, {0x0, 0xf4, 0xf, 0x9}, {0x5, 0x26, 0x4, 0x9}, {0x100, 0x3f, 0x4, 0x20}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x7, 0x7, 0xc9}, {0x6, 0x3, 0x7f}, {0x100, 0x81, 0xe0}, {0x5, 0x1, 0x2, 0xb9}, {0x7c, 0x0, 0x9, 0x1}, {0x15, 0x2, 0x3f, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x80, 0x4, 0x2}, {0xff, 0x3, 0x80, 0xdbd}, {0x3, 0xce, 0x3, 0x7}, {0x1ff, 0x3, 0x3}, {0xff, 0x6, 0x7f}, {0x0, 0x80, 0x4, 0x8}, {0x3f, 0x2, 0x0, 0x7f}, {0x6, 0x7, 0x7f, 0xffff}, {0x9, 0x2, 0x3, 0xfffffffe}, {0x7, 0xc3, 0x1, 0xfffffff8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x40}, 0x6002001) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/boot_params', 0x2a00, 0x41) ioctl$MON_IOCX_MFETCH(r11, 0xc0109207, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x400}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'sit0\x00', r9, 0x2f, 0x7f, 0x0, 0x1, 0x0, @local, @empty, 0x20, 0x700, 0x5, 0x3}}) sendmsg$NL80211_CMD_SET_WDS_PEER(r11, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x80, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="614a70cf58d2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c8cb186d499b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004000}, 0x200440c1) renameat2(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', r11, &(0x7f0000001940)='./file0\x00', 0x4) 17:36:48 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:36:48 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000000)) getpgrp(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000140)={0x9}) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/user\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f0000000800)) write$rfkill(0xffffffffffffffff, &(0x7f0000000840)={0x3f, 0x20, 0x0, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', r2, 0x4, 0x53, 0x0, 0x7, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x20, 0x1, 0xb74}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', r2, 0x29, 0x6, 0x91, 0x6, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)) 17:36:48 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/170, 0xaa}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:36:48 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r5, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) 17:36:48 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:36:48 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x200000, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000) socketpair(0x10, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x11, 0x8}, {0xfffb, 0x80, 0x6, 0x80000000}, {0xfff, 0xcd, 0xbd, 0x7}, {0x9, 0xdd, 0x81, 0xf17}, {0x5, 0x2, 0x40, 0xfffff800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x0, 0x9, 0x1}, {0x8, 0x7, 0x0, 0x80}, {0x7fff, 0x8, 0xff, 0x5}, {0x9, 0x2, 0x0, 0x10000}]}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x2, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x7, 0x6, 0x4e1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000bc0)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c00)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000cc0)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x4, 0x40, 0x4, @loopback, @local, 0x7800, 0x7800, 0x4, 0x8}}) 17:36:48 executing program 7: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x20000030) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "16d7a34cf52253bfa1bad4f633d05af4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x40}}, 0x4002000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x300, 0x401, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4004040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/mac80211', 0x260000, 0xc0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x10, 0x5, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7800, 0x8000, 0x2, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4c001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_print_times', 0x250400, 0x82) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r4, 0x4, 0x9, 0x7, 0x1, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x8001, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0x1f, 0x101, 0x55, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1ec, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1d0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x5b, 0x64, 0x1}, {0xe788, 0x0, 0x80, 0x6}, {0x4, 0x16, 0x20, 0x1}, {0x39, 0x0, 0x80}, {0x7, 0x7f, 0x6, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001400)={&(0x7f0000001300), 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 17:36:48 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) [ 172.742130] audit: type=1326 audit(1664732208.582:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4305 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1c620b19 code=0x0 17:36:48 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000780)) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:36:49 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop2', 0x224000, 0x180) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) [ 183.741576] Bluetooth: hci4: command 0x0406 tx timeout [ 183.741621] Bluetooth: hci2: command 0x0406 tx timeout [ 183.742751] Bluetooth: hci1: command 0x0406 tx timeout [ 183.743545] Bluetooth: hci5: command 0x0406 tx timeout [ 183.744636] Bluetooth: hci3: command 0x0406 tx timeout [ 183.745362] Bluetooth: hci0: command 0x0406 tx timeout 17:37:02 executing program 2: r0 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f0000000000)) getpgrp(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x34000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x40) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000140)={0x9}) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/user\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r3 = getpid() syz_open_procfs$userns(r3, &(0x7f0000000800)) write$rfkill(0xffffffffffffffff, &(0x7f0000000840)={0x3f, 0x20, 0x0, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl2\x00', r2, 0x4, 0x53, 0x0, 0x7, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x20, 0x1, 0xb74}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', r2, 0x29, 0x6, 0x91, 0x6, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40}}) 17:37:02 executing program 0: sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @random="2f9b4806e99b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) socketpair(0x21, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x1, 0x2, 0x34, @mcast1, @empty, 0x700, 0x20, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2fa191c58f192944, 0x19, 0x40, 0x3f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x1, 0x7fff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0xcf, 0x76, 0x101, 0x44, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7800, 0x81, 0xc29a}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x4, 0xba, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x80, 0x5, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x8000, 0x3ff, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x80, 0x7f, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8000, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x9, 0x50, @mcast1, @mcast1, 0x8000, 0x8000, 0x0, 0xbc62}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000c80)={0x8a8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x6, 0x81, 0x2}, {0xe000, 0x20, 0x7, 0x4}, {0x1, 0xf8, 0x3, 0xbb96}, {0x5, 0x0, 0x1f, 0x8}, {0x0, 0x2, 0x81, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb7c0ba3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xab7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc26}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0x5, 0x80, 0xe862}, {0x0, 0x80, 0x97, 0x69}, {0x9, 0x2, 0x20, 0x1}, {0x0, 0xf4, 0xf, 0x9}, {0x5, 0x26, 0x4, 0x9}, {0x100, 0x3f, 0x4, 0x20}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x7, 0x7, 0xc9}, {0x6, 0x3, 0x7f}, {0x100, 0x81, 0xe0}, {0x5, 0x1, 0x2, 0xb9}, {0x7c, 0x0, 0x9, 0x1}, {0x15, 0x2, 0x3f, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x80, 0x4, 0x2}, {0xff, 0x3, 0x80, 0xdbd}, {0x3, 0xce, 0x3, 0x7}, {0x1ff, 0x3, 0x3}, {0xff, 0x6, 0x7f}, {0x0, 0x80, 0x4, 0x8}, {0x3f, 0x2, 0x0, 0x7f}, {0x6, 0x7, 0x7f, 0xffff}, {0x9, 0x2, 0x3, 0xfffffffe}, {0x7, 0xc3, 0x1, 0xfffffff8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x40}, 0x6002001) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/boot_params', 0x2a00, 0x41) ioctl$MON_IOCX_MFETCH(r11, 0xc0109207, &(0x7f0000001640)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x400}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001680)={'sit0\x00', r9, 0x2f, 0x7f, 0x0, 0x1, 0x0, @local, @empty, 0x20, 0x700, 0x5, 0x3}}) renameat2(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', r11, &(0x7f0000001940)='./file0\x00', 0x4) 17:37:02 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r5, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) 17:37:02 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) 17:37:02 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:37:02 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:37:02 executing program 7: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x20000030) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "16d7a34cf52253bfa1bad4f633d05af4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x40}}, 0x4002000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x300, 0x401, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4004040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/mac80211', 0x260000, 0xc0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x10, 0x5, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7800, 0x8000, 0x2, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4c001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_print_times', 0x250400, 0x82) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r4, 0x4, 0x9, 0x7, 0x1, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x8001, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0x1f, 0x101, 0x55, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1ec, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1d0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x5b, 0x64, 0x1}, {0xe788, 0x0, 0x80, 0x6}, {0x4, 0x16, 0x20, 0x1}, {0x39, 0x0, 0x80}, {0x7, 0x7f, 0x6, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:37:02 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x200000, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000) socketpair(0x10, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x11, 0x8}, {0xfffb, 0x80, 0x6, 0x80000000}, {0xfff, 0xcd, 0xbd, 0x7}, {0x9, 0xdd, 0x81, 0xf17}, {0x5, 0x2, 0x40, 0xfffff800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x0, 0x9, 0x1}, {0x8, 0x7, 0x0, 0x80}, {0x7fff, 0x8, 0xff, 0x5}, {0x9, 0x2, 0x0, 0x10000}]}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x2, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x7, 0x6, 0x4e1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000bc0)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c00)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000cc0)) 17:37:02 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) [ 186.890226] audit: type=1326 audit(1664732222.730:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4375 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1c620b19 code=0x0 17:37:02 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee80211', 0x8800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0xc}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x6, 0x40, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x3, 0x9}}) renameat(r0, &(0x7f00000005c0)='./file0\x00', r0, &(0x7f0000000600)='./file0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000006c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x40100, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x19a) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000740)) syz_open_dev$usbmon(&(0x7f0000000a00), 0x5, 0x90100) 17:37:03 executing program 5: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x8000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x9) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000100)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/104, 0x68}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f40)={0x5ac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x81, 0x81, 0x23a}, {0x8, 0x0, 0xc6, 0x3ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe82}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5645}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x34a5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd62f}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) 17:37:03 executing program 1: socketpair(0x2c, 0x80000, 0x9ab, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44044}, 0xd66eeb2c94e32d84) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x60, 0x20, 0x0, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x3f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x40, 0x7, 0x7fff, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2dc}}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x12, 0x1, 0x1, 0xffffffffffffffff, 0xcd9e, 0x40, 0x7, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0xb, 0x6, 0x9, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r6, 0x29, 0x9, 0x9, 0xfe, 0x21, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf8e0, 0x781, 0x8, 0x6}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x51}, 0x8090) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) 17:37:03 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84050000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4014190) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/bsg', 0x80883, 0x16) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40880) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x1000, 0x86054107bec0555e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x727, 0x7, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x6, 0x80, 0x8, @mcast2, @private2, 0x7800, 0x8, 0x9, 0xdccc}}) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x1e, 0x5, 0xffe0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_subtree(r0, &(0x7f0000000680), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)={[{0x0, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}]}, 0x1b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20008000) [ 187.837448] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.837568] Bluetooth: hci6: command 0x0406 tx timeout [ 187.838372] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.839877] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.840721] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.841669] Call Trace: [ 187.841989] [ 187.842453] __schedule+0x893/0x2470 [ 187.843027] ? io_schedule_timeout+0x150/0x150 [ 187.843848] ? do_raw_spin_lock+0x121/0x260 [ 187.844740] ? rwlock_bug.part.0+0x90/0x90 [ 187.845230] schedule+0xda/0x1b0 [ 187.845644] rescuer_thread+0x851/0xdb0 [ 187.846123] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.846703] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.847264] ? lockdep_hardirqs_on+0x79/0x100 [ 187.847795] ? worker_thread+0x1260/0x1260 [ 187.848280] kthread+0x2ed/0x3a0 [ 187.848699] ? kthread_complete_and_exit+0x40/0x40 [ 187.849263] ret_from_fork+0x22/0x30 [ 187.849736] [ 187.850009] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.850727] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.851329] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.852168] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.853094] Call Trace: [ 187.853405] [ 187.853669] __schedule+0x893/0x2470 [ 187.854110] ? io_schedule_timeout+0x150/0x150 [ 187.854657] ? do_raw_spin_lock+0x121/0x260 [ 187.855143] ? rwlock_bug.part.0+0x90/0x90 [ 187.855653] schedule+0xda/0x1b0 [ 187.856049] rescuer_thread+0x851/0xdb0 [ 187.856528] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.857088] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.857675] ? lockdep_hardirqs_on+0x79/0x100 [ 187.858198] ? worker_thread+0x1260/0x1260 [ 187.858703] kthread+0x2ed/0x3a0 [ 187.859091] ? kthread_complete_and_exit+0x40/0x40 [ 187.859665] ret_from_fork+0x22/0x30 [ 187.860106] [ 187.860398] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.861120] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.861735] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.862602] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.863537] Call Trace: [ 187.863826] [ 187.864096] __schedule+0x893/0x2470 [ 187.864558] ? io_schedule_timeout+0x150/0x150 [ 187.865076] ? do_raw_spin_lock+0x121/0x260 [ 187.865581] ? rwlock_bug.part.0+0x90/0x90 [ 187.866083] schedule+0xda/0x1b0 [ 187.866497] rescuer_thread+0x851/0xdb0 [ 187.866948] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.867531] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.868091] ? lockdep_hardirqs_on+0x79/0x100 [ 187.868640] ? worker_thread+0x1260/0x1260 [ 187.869126] kthread+0x2ed/0x3a0 [ 187.869543] ? kthread_complete_and_exit+0x40/0x40 [ 187.870119] ret_from_fork+0x22/0x30 [ 187.870582] [ 187.870846] INFO: task netns:6 blocked for more than 143 seconds. [ 187.871527] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.872098] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.872945] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.873871] Call Trace: [ 187.874160] [ 187.874444] __schedule+0x893/0x2470 [ 187.874875] ? io_schedule_timeout+0x150/0x150 [ 187.875404] ? do_raw_spin_lock+0x121/0x260 [ 187.875882] ? rwlock_bug.part.0+0x90/0x90 [ 187.876386] schedule+0xda/0x1b0 [ 187.876781] rescuer_thread+0x851/0xdb0 [ 187.877235] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.877832] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.878410] ? lockdep_hardirqs_on+0x79/0x100 [ 187.878919] ? worker_thread+0x1260/0x1260 [ 187.879431] kthread+0x2ed/0x3a0 [ 187.879818] ? kthread_complete_and_exit+0x40/0x40 [ 187.880399] ret_from_fork+0x22/0x30 [ 187.880845] [ 187.881109] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.881852] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.882445] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.883262] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.884188] Workqueue: 0x0 (kblockd) [ 187.884648] Call Trace: [ 187.884933] [ 187.885192] __schedule+0x893/0x2470 [ 187.885644] ? io_schedule_timeout+0x150/0x150 [ 187.886196] schedule+0xda/0x1b0 [ 187.886609] worker_thread+0x15f/0x1260 [ 187.887070] ? process_one_work+0x16a0/0x16a0 [ 187.887597] kthread+0x2ed/0x3a0 [ 187.887977] ? kthread_complete_and_exit+0x40/0x40 [ 187.888548] ret_from_fork+0x22/0x30 [ 187.888984] [ 187.889252] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.890006] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.890605] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.891449] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.892390] Call Trace: [ 187.892680] [ 187.892938] __schedule+0x893/0x2470 [ 187.893392] ? io_schedule_timeout+0x150/0x150 [ 187.893911] ? do_raw_spin_lock+0x121/0x260 [ 187.894429] ? rwlock_bug.part.0+0x90/0x90 [ 187.894909] schedule+0xda/0x1b0 [ 187.895288] rescuer_thread+0x851/0xdb0 [ 187.895761] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.896357] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.896922] ? lockdep_hardirqs_on+0x79/0x100 [ 187.897459] ? worker_thread+0x1260/0x1260 [ 187.897940] kthread+0x2ed/0x3a0 [ 187.898363] ? kthread_complete_and_exit+0x40/0x40 [ 187.898922] ret_from_fork+0x22/0x30 [ 187.899404] [ 187.899673] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.900459] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.901037] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.901894] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.902831] Call Trace: [ 187.903113] [ 187.903394] __schedule+0x893/0x2470 [ 187.903833] ? io_schedule_timeout+0x150/0x150 [ 187.904373] ? mark_held_locks+0x9e/0xe0 [ 187.904827] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.905423] schedule+0xda/0x1b0 [ 187.905836] rcu_tasks_one_gp+0x3db/0xc10 [ 187.906354] rcu_tasks_kthread+0x80/0xa0 [ 187.906807] ? rcu_tasks_postscan+0x10/0x10 [ 187.907294] kthread+0x2ed/0x3a0 [ 187.907701] ? kthread_complete_and_exit+0x40/0x40 [ 187.908241] ret_from_fork+0x22/0x30 [ 187.908725] [ 187.908991] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.909743] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.910347] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.911183] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 187.912116] Workqueue: 0x0 (rcu_gp) [ 187.912567] Call Trace: [ 187.912859] [ 187.913115] __schedule+0x893/0x2470 [ 187.913579] ? io_schedule_timeout+0x150/0x150 [ 187.914126] schedule+0xda/0x1b0 [ 187.914551] worker_thread+0x15f/0x1260 [ 187.915015] ? process_one_work+0x16a0/0x16a0 [ 187.915567] kthread+0x2ed/0x3a0 [ 187.915947] ? kthread_complete_and_exit+0x40/0x40 [ 187.916524] ret_from_fork+0x22/0x30 [ 187.916963] [ 187.917229] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.918006] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.918611] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.919487] task:kworker/1:0H state:I stack:29416 pid:21 ppid:2 flags:0x00004000 [ 187.920411] Workqueue: 0x0 (events_highpri) [ 187.920915] Call Trace: [ 187.921209] [ 187.921500] __schedule+0x893/0x2470 [ 187.922067] ? io_schedule_timeout+0x150/0x150 [ 187.922810] schedule+0xda/0x1b0 [ 187.923357] worker_thread+0x15f/0x1260 [ 187.923967] ? process_one_work+0x16a0/0x16a0 [ 187.924669] kthread+0x2ed/0x3a0 [ 187.925176] ? kthread_complete_and_exit+0x40/0x40 [ 187.925966] ret_from_fork+0x22/0x30 [ 187.926579] [ 187.926921] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.927894] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.928707] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.929829] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.931099] Call Trace: [ 187.931532] [ 187.931877] __schedule+0x893/0x2470 [ 187.932479] ? io_schedule_timeout+0x150/0x150 [ 187.933150] ? do_raw_spin_lock+0x121/0x260 [ 187.933836] ? rwlock_bug.part.0+0x90/0x90 [ 187.934508] schedule+0xda/0x1b0 [ 187.935025] rescuer_thread+0x851/0xdb0 [ 187.935646] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.936414] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.937162] ? lockdep_hardirqs_on+0x79/0x100 [ 187.937906] ? worker_thread+0x1260/0x1260 [ 187.938569] kthread+0x2ed/0x3a0 [ 187.939075] ? kthread_complete_and_exit+0x40/0x40 [ 187.939833] ret_from_fork+0x22/0x30 [ 187.940454] [ 187.941157] [ 187.941157] Showing all locks held in the system: [ 187.942136] 1 lock held by rcu_tasks_kthre/11: [ 187.942821] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.944269] 1 lock held by khungtaskd/25: [ 187.944889] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.946247] 2 locks held by in:imklog/192: [ 187.946900] 3 locks held by rs:main Q:Reg/193: [ 187.947583] 7 locks held by syz-executor.1/298: [ 187.948266] [ 187.948563] ============================================= [ 187.948563] VM DIAGNOSIS: 17:37:03 Registers: info registers vcpu 0 RAX=1ffff11006e45fa9 RBX=ffff88803722fd18 RCX=ffffffff812a8ed1 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88803722fd48 RBP=ffff8880367395c0 RSP=ffff888032abfbb8 R8 =0000000000000001 R9 =ffff888032abfb5b R10=ffffed1006557f6b R11=0000000000000001 R12=dffffc0000000000 R13=ffff888037a00740 R14=0000000000000000 R15=ffff888007c413c0 RIP=ffffffff817bb812 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555574b400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd27d5108b0 CR3=000000001e924000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a88ab674c8 CR3=0000000008b76000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00642e65626f7270 646f6d2f6374652f YMM01=0000000000000000 0000000000000000 00642e65626f7270 646f6d2f6374652f YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 000000000000ff00 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000