Warning: Permanently added '[localhost]:60573' (ECDSA) to the list of known hosts. 2026/01/18 17:32:07 fuzzer started 2026/01/18 17:32:07 dialing manager at localhost:42157 syzkaller login: [ 50.272382] cgroup: Unknown subsys name 'net' [ 50.351422] cgroup: Unknown subsys name 'cpuset' [ 50.365237] cgroup: Unknown subsys name 'rlimit' 2026/01/18 17:32:19 syscalls: 223 2026/01/18 17:32:19 code coverage: enabled 2026/01/18 17:32:19 comparison tracing: enabled 2026/01/18 17:32:19 extra coverage: enabled 2026/01/18 17:32:19 setuid sandbox: enabled 2026/01/18 17:32:19 namespace sandbox: enabled 2026/01/18 17:32:19 Android sandbox: enabled 2026/01/18 17:32:19 fault injection: enabled 2026/01/18 17:32:19 leak checking: enabled 2026/01/18 17:32:19 net packet injection: enabled 2026/01/18 17:32:19 net device setup: enabled 2026/01/18 17:32:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/18 17:32:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/18 17:32:19 USB emulation: enabled 2026/01/18 17:32:19 hci packet injection: enabled 2026/01/18 17:32:19 wifi device emulation: enabled 2026/01/18 17:32:19 802.15.4 emulation: enabled 2026/01/18 17:32:19 fetching corpus: 0, signal 0/0 (executing program) 2026/01/18 17:32:20 starting 8 fuzzer processes 17:32:20 executing program 0: r0 = io_uring_setup(0x2ad2, &(0x7f0000000000)={0x0, 0x9fa9, 0x10, 0x0, 0x13b}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84080}, 0x20048800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, r1, 0x110, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf23, 0x64}}}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x24, 0x1}, {0x12, 0x1}, {0x48, 0x1}]}, @measure_req={0x26, 0x58, {0x7, 0x6, 0x2, "983d31c0ef0fe057f3103987ec86304e262fe90897d826ce6610f1e3dc5edb64037c991ac3d69516cd70b4c44bff76ca40d270612d5d2564acd8dc7912088c809f0371086354d62b19715430ff962532f098973f9e"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "237004726be9ffbd6f8c5ae496b66077e9c883eecf2c80119c6011af127471401515d0b4b612fd628bc16f71"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "a8e3d31cf89ed87545764d65"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "8486e0"}], @NL80211_ATTR_IE={0x88, 0x2a, [@tim={0x5, 0x82, {0x5, 0x3, 0x40, "aa81dc495b1d6e8a6bf5d82274fbeb427812c4ee3d17bb0e2ca96b26ae5a7511d0ddc0803245a08582beeb0a5784932f41fd45f7e9dcea62456505c40ed78f6590c42c5a34eccf5b063379691fe3e2912be3412742bbf6bb4958c61e3aa31880cc00f168c9d41ec041fa1c43447201a4ddd2d02f8cd1c7821f9162f3957a92"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "4835fa7b758d83089065cc6b63ec0f75af6c72ebd85806916fcf8bbaac445555fb5f437b431c697aa38a36f83b70ff7126ea9b3b452b96765328a1411ee6c58ce7683015ce0dc5e601c7f371443c69898583200eaf7c9c9ee3f32850c1cc5fd69e337e69d8ca521d8a35a2c3e6618aea42a21e136b80648e61e05bf216967d54e7c0169ea5fd689573087610393d234c4778f6c92c36977d441c41c21f3add54ae915018d33159ac0b2afc9d5ef8f2781e924dd370dd2d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_RRK={0x1c, 0xfc, "7c13abcbfbc81432ba5aaeb1356daaabcdd986d7df773c16"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}], @fils_params]}, 0x254}, 0x1, 0x0, 0x0, 0x24001}, 0x24000004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/rt_cache\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000580)=""/101) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xd0, 0x2a, [@gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0xed}, @tim={0x5, 0xbf, {0x0, 0x47, 0x6, "168f538196354218f25954a157edc5a67fb3ab6bab024ecd1c774d2e851bfdef5bcae525d46ff38a938e285000d56ae77961169403db0c077aac21e5d8b94953d553a0d1a42c2a3b2fe33799d79db420bfc65bce282f2695871456e583bc264f86d4a96996ed45ec4bc51c8ff824abaaa50489dc196284d6f7fcb2abe9aecad73b9ffdba129435980719d1bb42dd58822021d1fa7309ebaecc9c12b3ca0c4539e8ce0267eff7d5ba399d000a360634317a0746a9b5ae67a82ea70953"}}]}]}, 0xec}}, 0x6c265e4ef9202694) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000840)) write$eventfd(r3, &(0x7f0000000880)=0x9, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0xfffffff8, 0x3d2b}}, './file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000900)={0x4a, ""/74}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)={0x364, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d3}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c2}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a39eac19470dc0a76547911a9e1c3ccb007a3302947441cb18be0f9c79b4ca72b63fd2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fae284dde0db40dbe065078e41be4805f178a4e8aa6bbb2cf8adb4372917473950"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "05131b539e3e73b358085623b22d88ad4cbf91dc9ef312db44b3c658e5dc99b33cc1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d757e3944067f3de03a1fb4c058025a46ace12ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x48}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x8800}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x2, 0xfffffeec}}, './file0\x00'}) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000e00)=0xffffffff) 17:32:20 executing program 1: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/150) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/95) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x7) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x6, 0x10001]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x16c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x65}}}}, [@NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x104, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dea10af644e8"}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfa}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x70}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2400c014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10210220}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x575}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x8000, 0x1f, 0x7, 0x100, 0x81, 0x91, 0x6, 0x800, 0x20]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2fc, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x30a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8722}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb0c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcfc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000016c0)={&(0x7f0000000e40)={0x85c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x827, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7ffa}, @device_a, @device_b, @device_a, {0x1, 0x6}, @broadcast}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000001780)=""/219) 17:32:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x45}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000044) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x900, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xd7}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x20}}}}, [""]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x73}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x802}, 0x20004000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/fib_trie\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x313, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4091) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xd3, 0x10}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x44041) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x5, 0x18}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xcc, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x3b}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xa4, 0xac, "3a94c6131f0e3b8fee1d934397b3772b191f190410975532470452e6f7f274bc8d35da640206d61997badca0f77bfc2c7c6356c64c760a736a9bc2f677490c5b9527df121da1338b85df42af1f42d0d7242dfd41a8857658a662ba4e6be92449fc59fe54b3ebc44a3050ccc11eca50038e994290c2956e4b14c9e53a7bceae38894ebcc9e62e375a0b67ecc49f4429684ab60e120e8d338ed32b3753d8b25cbd"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8a}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x61ec7fb725882f5b}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x4041) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4844) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001080)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1b8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcdf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc231}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5a, 0x3, "f0f7c0e930354d18fecbdd9e24b79f41f45ce5a776c8f6237a8551303d965bd9c244ad1b237e67515559c9c81806ae5dd539bd10da70b2183fd83c021518f640fcc82d9bde969fd4e002680b5641d2d3c04703cae67e"}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "252eec4bf0dd61f52c980d1473f6d00af29c34449b75eb9140d289900d796a5c6743945239b7a6ab749ed703a46ea319028e894ce43f1a3cf367ab9fe83f16293c9ee6f8d5692457a6c599573f1dbac594b3c3f72497c25ed22816fd251221e869b34c43bf5a849e0f63d351dcacd1840d05e6e9a2d51111f103f7bab7790188b3091844d1681d2f"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "aec2a2782a132373a02f0220d2c5a202f06c8fd02dda2850c27578d14cc2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1b8}}, 0x4008000) 17:32:20 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0xdfd1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/224) r1 = socket(0x23, 0x80000, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa83}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc974}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x4ac000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000380)={0x6, 0xbacb, 0x3, 0x8000000, 0x8, 0x3}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x102, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0xc18a67cdc836726d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/stat\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x220, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd083}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0xc0c0}, 0x2004c810) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x40a480, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000880)=0x4) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000008c0)=""/116) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000940)=""/94) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdd, 0xe}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000090}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) 17:32:20 executing program 4: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x1000) shmdt(0x0) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/4096) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000001000)=""/115) shmdt(r0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x40400, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000010c0)=""/204) shmctl$SHM_LOCK(r2, 0xb) r4 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_LOCK(r2, 0xb) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r6 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f00000011c0)) prctl$PR_SET_NAME(0xf, &(0x7f0000001200)='/dev/vcsa\x00') 17:32:20 executing program 5: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0xd, 0xd6, &(0x7f0000000000)="cbae8d19c9dde883d9c5c31710b36c28ae57fb8cafa98514821615b27e2ee00742a56b7a9f569e82ac337844e1f1be90a53118c409351791cd8ca1e6b1af1f86802490ac3d82b77ead4dfa745af37533f91887174fb43071ed4fb7f4b0d3aa6083e667ae72384c4d7ee69783b4a257c291241feec26de2913e1ab7631e815891bac7eda7fca397b60123745b500d5f3c7b63107108a4400fab12b075c324fafe0dc2e6158acdd7739a0e95ca31d1e2de953fe53c1adc2967d758154f35b1daddd9e228b26a889e24a9f7cd6fd5b514ac88cfce09f53c"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/195) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/252) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000340)=""/172) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000540)={0x57, 0x80, 0x1000, {0x1, 0x4}, {0x4, 0x80}, @cond=[{0x69d5, 0x6, 0x0, 0x7, 0xbac, 0x3}, {0x4, 0x7, 0x26, 0x8, 0x7, 0x6}]}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000580)=""/123) syz_open_dev$sg(&(0x7f0000000600), 0x100000000, 0x1) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000640)=""/88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800000, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x4840}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x5, 0xd6}}, './file0\x00'}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x3, 0x6, 0x9, 0x100, 0x3}) r4 = socket(0x23, 0x4, 0x7) bind(r4, &(0x7f0000000940)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) r5 = syz_open_dev$loop(&(0x7f00000009c0), 0x6, 0x400) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x19) [ 61.753368] audit: type=1400 audit(1768757540.613:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:32:20 executing program 6: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/4096) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000001040)) lremovexattr(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=@random={'security.', '&\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001100)=0x20bc5853) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000001140)) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000001180)=0xffff78e5) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) open$dir(&(0x7f0000001340)='./file0\x00', 0x400884, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1000) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000013c0)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001400)) syz_open_dev$evdev(&(0x7f0000001440), 0x2, 0x200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001480)={0x0, {}, 0x0, {}, 0x9, 0x4, 0x13, 0x1, "e32bd32c1f334713c847601e326bd57ae6d91f34f524fcd9393971fc3293bfa084b6ab788d26757f00afd69343fc3c8a689a7d202a8874e12252feadf7524ee6", "7cbb83df1834ee1d07a1755e08f9007cf26c01c8401803c1be412c6b200f6919", [0x3, 0x1ac]}) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='children\x00') ioctl$BLKPG(r1, 0x1269, &(0x7f0000001680)={0x9, 0x5, 0xd3, &(0x7f0000001580)="f0deac721b2c8f19ae228867a32a50ebde0e5314e0d209e8dad52f7b763ee21215e47d34b87ba917a5ebd85c4b8e6832bdd839118801c52fac495d0ce196d205d929950bab1fae08a6778fd71046ad8f9ac3e3c65377b6951b7757d0782d2d2f6bb98db0c8ffa1974f5fcf8751eed69f6e2ae5019e4bbf134c873848ad78f918d91af0aefa51725cac2d5340b0226222f8a55a4a1e58f051402123aa932963c09dfa54949502e16e9bd663b53ae6bc9a787742cc1a9b8bb56d6efcfb661a4e18e0243fccb5c95222086c6a45f223d209e040a1"}) 17:32:20 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x70}}}}, [""]}, 0x20}}, 0x80) r3 = socket(0x2c, 0x800, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8044000}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x3a8, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b6df7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfb}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x62f799bb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1cd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff59a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x634}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "361753d2da10d3607ed9909b6d65a83c3a83bcf774a0ec"}, @TIPC_NLA_NODE_ID={0x47, 0x3, "7ca654e7466f73ab6b4a824a859a0432d03c9f18a452662f078da3c492a95dc24c64d3a8bc0312be2c57ed39d11caec8563d475766037ddb4b30362a43c43e73f4ae60"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "727549f509761367835112c7f5f11142e9e06ca8625126b00bde9348f1455581572b3e"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "eb0402443ffec0bbaa3c657d18d0c9cdefce95fcecb3fed83421cf63"}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f37cfb3c11dc472655b9e19298120f1c84730d8a0557cd3b5b4c5d5f29c1"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x4000844) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x440}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2e6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1199}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x563}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005001}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='coredump_filter\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r6) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xc12e}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r6, {0x9, 0x1}}, './file0\x00'}) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x621}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x840) [ 62.976496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.979367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.983391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.985411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.987193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.989357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.994977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.998842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.001943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.006853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.053008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.053585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.055168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.057202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.058942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.060988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.062989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.065832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.070290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.072338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.073885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.075632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.082255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.107988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.112303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.121267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.124284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.136256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.138162] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.144847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.144897] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.146412] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.149936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.166307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.170199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.181107] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.190460] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.191564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.193848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.196280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.071329] Bluetooth: hci1: command tx timeout [ 65.071758] Bluetooth: hci0: command tx timeout [ 65.135304] Bluetooth: hci3: command tx timeout [ 65.135349] Bluetooth: hci2: command tx timeout [ 65.200919] Bluetooth: hci4: command tx timeout [ 65.262828] Bluetooth: hci7: command tx timeout [ 65.263847] Bluetooth: hci6: command tx timeout [ 65.265308] Bluetooth: hci5: command tx timeout [ 67.118821] Bluetooth: hci1: command tx timeout [ 67.118950] Bluetooth: hci0: command tx timeout [ 67.183421] Bluetooth: hci3: command tx timeout [ 67.183737] Bluetooth: hci2: command tx timeout [ 67.247823] Bluetooth: hci4: command tx timeout [ 67.311786] Bluetooth: hci6: command tx timeout [ 67.311913] Bluetooth: hci7: command tx timeout [ 67.312575] Bluetooth: hci5: command tx timeout [ 69.166785] Bluetooth: hci0: command tx timeout [ 69.169782] Bluetooth: hci1: command tx timeout [ 69.231768] Bluetooth: hci3: command tx timeout [ 69.232513] Bluetooth: hci2: command tx timeout [ 69.296742] Bluetooth: hci4: command tx timeout [ 69.359849] Bluetooth: hci7: command tx timeout [ 69.359892] Bluetooth: hci5: command tx timeout [ 69.360579] Bluetooth: hci6: command tx timeout [ 71.216668] Bluetooth: hci1: command tx timeout [ 71.216722] Bluetooth: hci0: command tx timeout [ 71.278838] Bluetooth: hci3: command tx timeout [ 71.278853] Bluetooth: hci2: command tx timeout [ 71.344721] Bluetooth: hci4: command tx timeout [ 71.406768] Bluetooth: hci5: command tx timeout [ 71.407050] Bluetooth: hci7: command tx timeout [ 71.408197] Bluetooth: hci6: command tx timeout [ 104.571374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.572062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.623592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.624231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.715267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.716640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.826063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.826678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.882042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.882972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.931063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.931680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.984824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.985476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.034903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.035528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.059415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.060028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.119032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.119642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.193386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.194043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.198233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.198852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.295187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.295907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.329093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.330254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:33:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x45}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000044) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x900, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xd7}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x20}}}}, [""]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x73}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x802}, 0x20004000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/fib_trie\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x313, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4091) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xd3, 0x10}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x44041) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x5, 0x18}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xcc, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x3b}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xa4, 0xac, "3a94c6131f0e3b8fee1d934397b3772b191f190410975532470452e6f7f274bc8d35da640206d61997badca0f77bfc2c7c6356c64c760a736a9bc2f677490c5b9527df121da1338b85df42af1f42d0d7242dfd41a8857658a662ba4e6be92449fc59fe54b3ebc44a3050ccc11eca50038e994290c2956e4b14c9e53a7bceae38894ebcc9e62e375a0b67ecc49f4429684ab60e120e8d338ed32b3753d8b25cbd"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8a}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x61ec7fb725882f5b}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x4041) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4844) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001080)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1b8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcdf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc231}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5a, 0x3, "f0f7c0e930354d18fecbdd9e24b79f41f45ce5a776c8f6237a8551303d965bd9c244ad1b237e67515559c9c81806ae5dd539bd10da70b2183fd83c021518f640fcc82d9bde969fd4e002680b5641d2d3c04703cae67e"}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "252eec4bf0dd61f52c980d1473f6d00af29c34449b75eb9140d289900d796a5c6743945239b7a6ab749ed703a46ea319028e894ce43f1a3cf367ab9fe83f16293c9ee6f8d5692457a6c599573f1dbac594b3c3f72497c25ed22816fd251221e869b34c43bf5a849e0f63d351dcacd1840d05e6e9a2d51111f103f7bab7790188b3091844d1681d2f"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "aec2a2782a132373a02f0220d2c5a202f06c8fd02dda2850c27578d14cc2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1b8}}, 0x4008000) [ 105.475087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.476980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.477623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.481269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:33:04 executing program 6: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/4096) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000001040)) lremovexattr(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=@random={'security.', '&\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001100)=0x20bc5853) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000001140)) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000001180)=0xffff78e5) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) open$dir(&(0x7f0000001340)='./file0\x00', 0x400884, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1000) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000013c0)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001400)) syz_open_dev$evdev(&(0x7f0000001440), 0x2, 0x200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001480)={0x0, {}, 0x0, {}, 0x9, 0x4, 0x13, 0x1, "e32bd32c1f334713c847601e326bd57ae6d91f34f524fcd9393971fc3293bfa084b6ab788d26757f00afd69343fc3c8a689a7d202a8874e12252feadf7524ee6", "7cbb83df1834ee1d07a1755e08f9007cf26c01c8401803c1be412c6b200f6919", [0x3, 0x1ac]}) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='children\x00') ioctl$BLKPG(r1, 0x1269, &(0x7f0000001680)={0x9, 0x5, 0xd3, &(0x7f0000001580)="f0deac721b2c8f19ae228867a32a50ebde0e5314e0d209e8dad52f7b763ee21215e47d34b87ba917a5ebd85c4b8e6832bdd839118801c52fac495d0ce196d205d929950bab1fae08a6778fd71046ad8f9ac3e3c65377b6951b7757d0782d2d2f6bb98db0c8ffa1974f5fcf8751eed69f6e2ae5019e4bbf134c873848ad78f918d91af0aefa51725cac2d5340b0226222f8a55a4a1e58f051402123aa932963c09dfa54949502e16e9bd663b53ae6bc9a787742cc1a9b8bb56d6efcfb661a4e18e0243fccb5c95222086c6a45f223d209e040a1"}) 17:33:15 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0xdfd1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/224) r1 = socket(0x23, 0x80000, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa83}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc974}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x4ac000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000380)={0x6, 0xbacb, 0x3, 0x8000000, 0x8, 0x3}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x102, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0xc18a67cdc836726d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/stat\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x220, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd083}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0xc0c0}, 0x2004c810) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x40a480, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000880)=0x4) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000008c0)=""/116) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000940)=""/94) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdd, 0xe}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000090}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) 17:33:15 executing program 0: r0 = io_uring_setup(0x2ad2, &(0x7f0000000000)={0x0, 0x9fa9, 0x10, 0x0, 0x13b}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84080}, 0x20048800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, r1, 0x110, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf23, 0x64}}}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x24, 0x1}, {0x12, 0x1}, {0x48, 0x1}]}, @measure_req={0x26, 0x58, {0x7, 0x6, 0x2, "983d31c0ef0fe057f3103987ec86304e262fe90897d826ce6610f1e3dc5edb64037c991ac3d69516cd70b4c44bff76ca40d270612d5d2564acd8dc7912088c809f0371086354d62b19715430ff962532f098973f9e"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "237004726be9ffbd6f8c5ae496b66077e9c883eecf2c80119c6011af127471401515d0b4b612fd628bc16f71"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "a8e3d31cf89ed87545764d65"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "8486e0"}], @NL80211_ATTR_IE={0x88, 0x2a, [@tim={0x5, 0x82, {0x5, 0x3, 0x40, "aa81dc495b1d6e8a6bf5d82274fbeb427812c4ee3d17bb0e2ca96b26ae5a7511d0ddc0803245a08582beeb0a5784932f41fd45f7e9dcea62456505c40ed78f6590c42c5a34eccf5b063379691fe3e2912be3412742bbf6bb4958c61e3aa31880cc00f168c9d41ec041fa1c43447201a4ddd2d02f8cd1c7821f9162f3957a92"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "4835fa7b758d83089065cc6b63ec0f75af6c72ebd85806916fcf8bbaac445555fb5f437b431c697aa38a36f83b70ff7126ea9b3b452b96765328a1411ee6c58ce7683015ce0dc5e601c7f371443c69898583200eaf7c9c9ee3f32850c1cc5fd69e337e69d8ca521d8a35a2c3e6618aea42a21e136b80648e61e05bf216967d54e7c0169ea5fd689573087610393d234c4778f6c92c36977d441c41c21f3add54ae915018d33159ac0b2afc9d5ef8f2781e924dd370dd2d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_RRK={0x1c, 0xfc, "7c13abcbfbc81432ba5aaeb1356daaabcdd986d7df773c16"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}], @fils_params]}, 0x254}, 0x1, 0x0, 0x0, 0x24001}, 0x24000004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/rt_cache\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000580)=""/101) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xd0, 0x2a, [@gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0xed}, @tim={0x5, 0xbf, {0x0, 0x47, 0x6, "168f538196354218f25954a157edc5a67fb3ab6bab024ecd1c774d2e851bfdef5bcae525d46ff38a938e285000d56ae77961169403db0c077aac21e5d8b94953d553a0d1a42c2a3b2fe33799d79db420bfc65bce282f2695871456e583bc264f86d4a96996ed45ec4bc51c8ff824abaaa50489dc196284d6f7fcb2abe9aecad73b9ffdba129435980719d1bb42dd58822021d1fa7309ebaecc9c12b3ca0c4539e8ce0267eff7d5ba399d000a360634317a0746a9b5ae67a82ea70953"}}]}]}, 0xec}}, 0x6c265e4ef9202694) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000840)) write$eventfd(r3, &(0x7f0000000880)=0x9, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0xfffffff8, 0x3d2b}}, './file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000900)={0x4a, ""/74}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)={0x364, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d3}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c2}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a39eac19470dc0a76547911a9e1c3ccb007a3302947441cb18be0f9c79b4ca72b63fd2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fae284dde0db40dbe065078e41be4805f178a4e8aa6bbb2cf8adb4372917473950"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "05131b539e3e73b358085623b22d88ad4cbf91dc9ef312db44b3c658e5dc99b33cc1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d757e3944067f3de03a1fb4c058025a46ace12ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x48}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x8800}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x2, 0xfffffeec}}, './file0\x00'}) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000e00)=0xffffffff) 17:33:15 executing program 5: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0xd, 0xd6, &(0x7f0000000000)="cbae8d19c9dde883d9c5c31710b36c28ae57fb8cafa98514821615b27e2ee00742a56b7a9f569e82ac337844e1f1be90a53118c409351791cd8ca1e6b1af1f86802490ac3d82b77ead4dfa745af37533f91887174fb43071ed4fb7f4b0d3aa6083e667ae72384c4d7ee69783b4a257c291241feec26de2913e1ab7631e815891bac7eda7fca397b60123745b500d5f3c7b63107108a4400fab12b075c324fafe0dc2e6158acdd7739a0e95ca31d1e2de953fe53c1adc2967d758154f35b1daddd9e228b26a889e24a9f7cd6fd5b514ac88cfce09f53c"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/195) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/252) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000340)=""/172) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000540)={0x57, 0x80, 0x1000, {0x1, 0x4}, {0x4, 0x80}, @cond=[{0x69d5, 0x6, 0x0, 0x7, 0xbac, 0x3}, {0x4, 0x7, 0x26, 0x8, 0x7, 0x6}]}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000580)=""/123) syz_open_dev$sg(&(0x7f0000000600), 0x100000000, 0x1) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000640)=""/88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800000, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x4840}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x5, 0xd6}}, './file0\x00'}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x3, 0x6, 0x9, 0x100, 0x3}) r4 = socket(0x23, 0x4, 0x7) bind(r4, &(0x7f0000000940)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) r5 = syz_open_dev$loop(&(0x7f00000009c0), 0x6, 0x400) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x19) 17:33:15 executing program 4: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x1000) shmdt(0x0) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/4096) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000001000)=""/115) shmdt(r0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x40400, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000010c0)=""/204) shmctl$SHM_LOCK(r2, 0xb) r4 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_LOCK(r2, 0xb) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r6 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f00000011c0)) prctl$PR_SET_NAME(0xf, &(0x7f0000001200)='/dev/vcsa\x00') 17:33:15 executing program 1: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/150) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/95) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x7) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x6, 0x10001]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x16c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x65}}}}, [@NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x104, 0xe, 0x0, 0x1, [{0xfe, 0x0, "7085b6be41b8f13dae579913ece5c0fef702217e4ec06293c3687f223af7c0877b591b771763d6dc106ffb71ecfeb4da3971993cbdec43a71bc14a8a6a7dca5847f95b19d6b41c175e175e791580f14457b93aa4fb3dc7a656d413d1d9c93017b872f10d59ade286cbca20d61d5b04df762d3d639316518783a3a43ffec522810565df9a2e5a9e2aae3a265aae4412930a18f8122bb0dbf8bbcb574dbf38fada3898983f57c5186e22d70cdda17b1f4021f3f262fd4c886695d5d8802c313b4660d4b0f5f8064fa8fe85ee66ac6db08adf6d4b1ad7fb3c15ee7228535533aac8f93a8d878600cd69377cb850dd8c278e9c68c6d7438b64709386"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dea10af644e8"}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfa}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x70}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2400c014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10210220}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x575}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x8000, 0x1f, 0x7, 0x100, 0x81, 0x91, 0x6, 0x800, 0x20]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2fc, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x30a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8722}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb0c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcfc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000016c0)={&(0x7f0000000e40)={0x85c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x827, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7ffa}, @device_a, @device_b, @device_a, {0x1, 0x6}, @broadcast}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000001780)=""/219) 17:33:15 executing program 6: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/4096) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000001040)) lremovexattr(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=@random={'security.', '&\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001100)=0x20bc5853) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000001140)) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000001180)=0xffff78e5) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) open$dir(&(0x7f0000001340)='./file0\x00', 0x400884, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1000) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000013c0)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001400)) syz_open_dev$evdev(&(0x7f0000001440), 0x2, 0x200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001480)={0x0, {}, 0x0, {}, 0x9, 0x4, 0x13, 0x1, "e32bd32c1f334713c847601e326bd57ae6d91f34f524fcd9393971fc3293bfa084b6ab788d26757f00afd69343fc3c8a689a7d202a8874e12252feadf7524ee6", "7cbb83df1834ee1d07a1755e08f9007cf26c01c8401803c1be412c6b200f6919", [0x3, 0x1ac]}) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='children\x00') ioctl$BLKPG(r1, 0x1269, &(0x7f0000001680)={0x9, 0x5, 0xd3, &(0x7f0000001580)="f0deac721b2c8f19ae228867a32a50ebde0e5314e0d209e8dad52f7b763ee21215e47d34b87ba917a5ebd85c4b8e6832bdd839118801c52fac495d0ce196d205d929950bab1fae08a6778fd71046ad8f9ac3e3c65377b6951b7757d0782d2d2f6bb98db0c8ffa1974f5fcf8751eed69f6e2ae5019e4bbf134c873848ad78f918d91af0aefa51725cac2d5340b0226222f8a55a4a1e58f051402123aa932963c09dfa54949502e16e9bd663b53ae6bc9a787742cc1a9b8bb56d6efcfb661a4e18e0243fccb5c95222086c6a45f223d209e040a1"}) 17:33:15 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x70}}}}, [""]}, 0x20}}, 0x80) r3 = socket(0x2c, 0x800, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8044000}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x3a8, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b6df7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfb}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x62f799bb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1cd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff59a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x634}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "361753d2da10d3607ed9909b6d65a83c3a83bcf774a0ec"}, @TIPC_NLA_NODE_ID={0x47, 0x3, "7ca654e7466f73ab6b4a824a859a0432d03c9f18a452662f078da3c492a95dc24c64d3a8bc0312be2c57ed39d11caec8563d475766037ddb4b30362a43c43e73f4ae60"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "727549f509761367835112c7f5f11142e9e06ca8625126b00bde9348f1455581572b3e"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "eb0402443ffec0bbaa3c657d18d0c9cdefce95fcecb3fed83421cf63"}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f37cfb3c11dc472655b9e19298120f1c84730d8a0557cd3b5b4c5d5f29c1"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x4000844) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x440}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2e6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1199}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x563}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005001}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='coredump_filter\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r6) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xc12e}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r6, {0x9, 0x1}}, './file0\x00'}) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x621}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x840) 17:33:15 executing program 2: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0xdfd1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/224) r1 = socket(0x23, 0x80000, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa83}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc974}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x4ac000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000380)={0x6, 0xbacb, 0x3, 0x8000000, 0x8, 0x3}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x102, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0xc18a67cdc836726d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/stat\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x220, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd083}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0xc0c0}, 0x2004c810) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x40a480, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000880)=0x4) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000008c0)=""/116) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000940)=""/94) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdd, 0xe}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000090}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) 17:33:15 executing program 1: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/150) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/95) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x7) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x6, 0x10001]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x16c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x65}}}}, [@NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x104, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dea10af644e8"}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfa}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x70}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2400c014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10210220}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x575}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x8000, 0x1f, 0x7, 0x100, 0x81, 0x91, 0x6, 0x800, 0x20]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2fc, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x30a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8722}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb0c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcfc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000016c0)={&(0x7f0000000e40)={0x85c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x827, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7ffa}, @device_a, @device_b, @device_a, {0x1, 0x6}, @broadcast}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000001780)=""/219) 17:33:15 executing program 5: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0xd, 0xd6, &(0x7f0000000000)="cbae8d19c9dde883d9c5c31710b36c28ae57fb8cafa98514821615b27e2ee00742a56b7a9f569e82ac337844e1f1be90a53118c409351791cd8ca1e6b1af1f86802490ac3d82b77ead4dfa745af37533f91887174fb43071ed4fb7f4b0d3aa6083e667ae72384c4d7ee69783b4a257c291241feec26de2913e1ab7631e815891bac7eda7fca397b60123745b500d5f3c7b63107108a4400fab12b075c324fafe0dc2e6158acdd7739a0e95ca31d1e2de953fe53c1adc2967d758154f35b1daddd9e228b26a889e24a9f7cd6fd5b514ac88cfce09f53c"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/195) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/252) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000340)=""/172) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000540)={0x57, 0x80, 0x1000, {0x1, 0x4}, {0x4, 0x80}, @cond=[{0x69d5, 0x6, 0x0, 0x7, 0xbac, 0x3}, {0x4, 0x7, 0x26, 0x8, 0x7, 0x6}]}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000580)=""/123) syz_open_dev$sg(&(0x7f0000000600), 0x100000000, 0x1) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000640)=""/88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800000, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x4840}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x5, 0xd6}}, './file0\x00'}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x3, 0x6, 0x9, 0x100, 0x3}) r4 = socket(0x23, 0x4, 0x7) bind(r4, &(0x7f0000000940)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) r5 = syz_open_dev$loop(&(0x7f00000009c0), 0x6, 0x400) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x19) 17:33:15 executing program 6: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/4096) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000001040)) lremovexattr(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=@random={'security.', '&\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001100)=0x20bc5853) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000001140)) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000001180)=0xffff78e5) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) open$dir(&(0x7f0000001340)='./file0\x00', 0x400884, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1000) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000013c0)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001400)) syz_open_dev$evdev(&(0x7f0000001440), 0x2, 0x200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001480)={0x0, {}, 0x0, {}, 0x9, 0x4, 0x13, 0x1, "e32bd32c1f334713c847601e326bd57ae6d91f34f524fcd9393971fc3293bfa084b6ab788d26757f00afd69343fc3c8a689a7d202a8874e12252feadf7524ee6", "7cbb83df1834ee1d07a1755e08f9007cf26c01c8401803c1be412c6b200f6919", [0x3, 0x1ac]}) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='children\x00') ioctl$BLKPG(r1, 0x1269, &(0x7f0000001680)={0x9, 0x5, 0xd3, &(0x7f0000001580)="f0deac721b2c8f19ae228867a32a50ebde0e5314e0d209e8dad52f7b763ee21215e47d34b87ba917a5ebd85c4b8e6832bdd839118801c52fac495d0ce196d205d929950bab1fae08a6778fd71046ad8f9ac3e3c65377b6951b7757d0782d2d2f6bb98db0c8ffa1974f5fcf8751eed69f6e2ae5019e4bbf134c873848ad78f918d91af0aefa51725cac2d5340b0226222f8a55a4a1e58f051402123aa932963c09dfa54949502e16e9bd663b53ae6bc9a787742cc1a9b8bb56d6efcfb661a4e18e0243fccb5c95222086c6a45f223d209e040a1"}) 17:33:15 executing program 0: r0 = io_uring_setup(0x2ad2, &(0x7f0000000000)={0x0, 0x9fa9, 0x10, 0x0, 0x13b}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84080}, 0x20048800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, r1, 0x110, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf23, 0x64}}}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x24, 0x1}, {0x12, 0x1}, {0x48, 0x1}]}, @measure_req={0x26, 0x58, {0x7, 0x6, 0x2, "983d31c0ef0fe057f3103987ec86304e262fe90897d826ce6610f1e3dc5edb64037c991ac3d69516cd70b4c44bff76ca40d270612d5d2564acd8dc7912088c809f0371086354d62b19715430ff962532f098973f9e"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "237004726be9ffbd6f8c5ae496b66077e9c883eecf2c80119c6011af127471401515d0b4b612fd628bc16f71"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "a8e3d31cf89ed87545764d65"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "8486e0"}], @NL80211_ATTR_IE={0x88, 0x2a, [@tim={0x5, 0x82, {0x5, 0x3, 0x40, "aa81dc495b1d6e8a6bf5d82274fbeb427812c4ee3d17bb0e2ca96b26ae5a7511d0ddc0803245a08582beeb0a5784932f41fd45f7e9dcea62456505c40ed78f6590c42c5a34eccf5b063379691fe3e2912be3412742bbf6bb4958c61e3aa31880cc00f168c9d41ec041fa1c43447201a4ddd2d02f8cd1c7821f9162f3957a92"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "4835fa7b758d83089065cc6b63ec0f75af6c72ebd85806916fcf8bbaac445555fb5f437b431c697aa38a36f83b70ff7126ea9b3b452b96765328a1411ee6c58ce7683015ce0dc5e601c7f371443c69898583200eaf7c9c9ee3f32850c1cc5fd69e337e69d8ca521d8a35a2c3e6618aea42a21e136b80648e61e05bf216967d54e7c0169ea5fd689573087610393d234c4778f6c92c36977d441c41c21f3add54ae915018d33159ac0b2afc9d5ef8f2781e924dd370dd2d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_RRK={0x1c, 0xfc, "7c13abcbfbc81432ba5aaeb1356daaabcdd986d7df773c16"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}], @fils_params]}, 0x254}, 0x1, 0x0, 0x0, 0x24001}, 0x24000004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/rt_cache\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000580)=""/101) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xd0, 0x2a, [@gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0xed}, @tim={0x5, 0xbf, {0x0, 0x47, 0x6, "168f538196354218f25954a157edc5a67fb3ab6bab024ecd1c774d2e851bfdef5bcae525d46ff38a938e285000d56ae77961169403db0c077aac21e5d8b94953d553a0d1a42c2a3b2fe33799d79db420bfc65bce282f2695871456e583bc264f86d4a96996ed45ec4bc51c8ff824abaaa50489dc196284d6f7fcb2abe9aecad73b9ffdba129435980719d1bb42dd58822021d1fa7309ebaecc9c12b3ca0c4539e8ce0267eff7d5ba399d000a360634317a0746a9b5ae67a82ea70953"}}]}]}, 0xec}}, 0x6c265e4ef9202694) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000840)) write$eventfd(r3, &(0x7f0000000880)=0x9, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0xfffffff8, 0x3d2b}}, './file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000900)={0x4a, ""/74}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)={0x364, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d3}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c2}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a39eac19470dc0a76547911a9e1c3ccb007a3302947441cb18be0f9c79b4ca72b63fd2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fae284dde0db40dbe065078e41be4805f178a4e8aa6bbb2cf8adb4372917473950"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "05131b539e3e73b358085623b22d88ad4cbf91dc9ef312db44b3c658e5dc99b33cc1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d757e3944067f3de03a1fb4c058025a46ace12ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x48}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x8800}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x2, 0xfffffeec}}, './file0\x00'}) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000e00)=0xffffffff) 17:33:15 executing program 4: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x1000) shmdt(0x0) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/4096) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000001000)=""/115) shmdt(r0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x40400, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000010c0)=""/204) shmctl$SHM_LOCK(r2, 0xb) r4 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_LOCK(r2, 0xb) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r6 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f00000011c0)) prctl$PR_SET_NAME(0xf, &(0x7f0000001200)='/dev/vcsa\x00') 17:33:15 executing program 1: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/150) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/95) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x7) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x6, 0x10001]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x16c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x65}}}}, [@NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x104, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dea10af644e8"}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfa}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x70}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2400c014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10210220}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x575}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x8000, 0x1f, 0x7, 0x100, 0x81, 0x91, 0x6, 0x800, 0x20]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2fc, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x30a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8722}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb0c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcfc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000016c0)={&(0x7f0000000e40)={0x85c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x827, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7ffa}, @device_a, @device_b, @device_a, {0x1, 0x6}, @broadcast}, @random="f542d75c9d4a2a8b7f55da957f5786b14741d840ed1eeecb4e8fe35b416e3117e9ff4ec956ede5831806abc27bdb18e4f07634459e98353a8336ffcb1ae2b079f5fb6e6d27abbd280652b171b5cb56fb9bb33ede3cdb1d08d6465b0c2debe7d94b5e265c90c75da4d9da7c329d098eec9f8aba1483416e8257b235b877011378fcbf4d5c32c9ab263ba5fc97f46f9e0b09862a0befc759f0f6d5180e36f618a0891f38a0c7ebdee424daa8fcf58c50a36175e2a3d9565d3cb718f6f6255029eca93f0ecd26d3023404fbfbe19b228a06fdd303e0ad1148f5586c7ed35477ec21ed2c9c5a1de74bf208b587dabe9eec8c9c0bf8e39dbefffd75f66577d4ce1517a942e9c4a49ca75f664764d9cfcdb96bb81cc676bf697ef68e0ed6de810a7cf21c84dcb290fa3f6a30f5fc32974a77edeab9b8ab27fa36683a57fc41fe9dca884d818b816519892a81a5a2e52b28a6cd650556505b8880b0b2ca045a8646fdf060a26e05fb4ecf3172d948d92bb827a4b0e7d98a7f407deab1696b723196bc64718753c25a62851665a77a9e6be902f46df4f8c286c4c53ddd3edaea9cac7a76979464619cf73493afb59cf135234339de001929194772714f36e8f90e1fbc3c41e5e08ad903efba6f33d70f5b816b9a81e48b09585df51fee914adf9f06b342e54f29b141cd01de80db6782c42c803a5ed39b7c522feecae786cef68bf1935fa344b1371e76681ea3c092ec1d2922aa0418131a6143477420daf333aee0bed41b75d04f2f349338dec9ef14040d176283a201ffcbde35fb0020ce0090e7ff7fad497a3c6bc20725c453c2f8379e954c3e949d67af946871fe59e71c6c0b089c103d62f49b8513ff068d5f84b20cf7453238e25c23e91a1dc1563489485ccf10a3feb02f7764c395f15d2be74e4a7baddba5cdf15b8f9c094c647294811c62f8f0dc61206d44eccb908eb08fb6f3a81529d672a03cb9000ad90ac1c9dd1dfc8e98045da9f176eb4b4ccb6985029c0c5cc7fbfa64cb4785476ca4ec4e106ffa6859ce41bed2048330c4eb293f4e3d12bcc80f5a18799abdf7b398ea9e78dccc095a96736267301312a49083c383db95f4d585e78a8e7bb31f369ab6b83c4715cbe912e539ed64784b701cbc8e5639e7bba71e557d61772aeca45d9d438cf02e048f1ffc1fe616d03db187fa8d9f7d739b8ba62d18fb6abf7c1c2aca96c74cb63f8e2858410457f3cfb86232b6ea2676c0b9d6b4215d197ba10edc6ce18f2eff14c90fea725763544a12bd89cbd4bf4abaca5baad829adccfeeded9e2a8419d2c82e6627320be4b91daeef499ebd27eac8fd462cbca8eef59f9595e836d6b3e308b898db6def0beb73e422e3ec8104c1ad76718edce96e619db4b83e9b1cbf017de31abd54c6515debeee64357381364675c5290c8839742606f9fd6c5ebc8b4a9512d70f610ad2e6cac4f8920c2bc15ab0a73c08da9d9a263498c8a92e33f18d6dab610c08e7d3522530eaa1239a8e196b0751c3e96e28467ddbbfb5b94097bcc0bd1d0974a6255aac70cdf61700c2b8cd72a9c4e4ed4e1b8c47f7d857e32dc17e03cdd4b8e6389633caf17e8c0e9f6ba57a142ba844ccb13aaac96e196a8fa91368926e355f051596bfdf170eea69182b7ca0eb6518c5e556ae1be19b3d43ef8044598159a30d39151afe5d5c81a65115ccbced6c67455b877950bb6a9c6c3fa065f3ac741bceefb2df5199a43cef916409af5fe570929acca18ac2c49511564ac26a00640ad0453fae09f8de5976cdc23b10b18e3635aaa4f617bc4739a0c5443bd72fe0c7062d3ef1f2f8cb893dede7fc3ceadb011b808776e19673dbf4baeb0671db1049525ee2fb3128d2eef9cdfd1d41adb0814c5a2c73f5cbb8133113b65f234ee431a13485206fa4999a7c644dc65e9493207590842b2ab583d3d1585234b8d037f62e78549484300611427b29cc7c66cc74183c0fef367542fd5b5e0cd3dda301efc973c30673aec1a7d64a2af8b06875a7fdcf5b708417d611caa20a2b3eaf5cd22ca10dc656e5d962670c99e315d93805aadefbc1c46ad227e59f339b50dd32eba430e1baa4bf6dc1f877cd1ba8198e1bc5efcd899d6a8c942e2c2252b0d4c62ac533c6a53e481eb930be0bf56fecab40dacf240980b24a7b85f9b434ae417fc9d81099999ff39eb5d630a9a707a1bec0110f768d85606409c9c96765a31bdb99b849c2a5b5a9a6bff6cc11f3f4307206532daa66e4e2e4c306d80f98f29e12d65ffb4880b9694cee69b6d8df5bab785857b83e829cce6124e5017724d5cfaf760740658ccd26d1453e81ff9e3d836dd22c53012d3da264079ea0268ac8754eafd64d6cea806a1fd106c6656e97b7113a26375f72bc2cff6964a6f73802350eab02aa4029769b1898ca9824b3e0239c9aeda8f8f5aeaed90733d50057c7cecf609beea9fd30406961939b0957c6f921ffacdeebab18be29fd6b1bd06f79ed7883216c9f9ca09c44f5ac49a8d33e15ed9c001be1d286d9755298c0f25576c99fb879efda1266ed43e0cc9bc661121ab8b5255f89fa54fa8ffaf586a6ad538bcd7dafd3ded827299d439b2dc306c5989c6e3474eb5d787a4ec806418e8c04584b425b82cba46fb33c6b90c903105a70c44870f4f1503cf0a2fda3adf2b00f3c627e8586aa318b68479f12cd0db40fb0c0bb068ec747133102c5f0198871695dccc0310f4e324600916dd58bbd783888f68af9f2b152b6388d50e4cd1588ad7bf8b26ebb67cf1755c76bcdb27d55dca555844b86d57adefa6ee9f12cdcdd841829bb13424d8d35b4b01b826da17cce9442d79cabcde062734dc4cf906ed6fac8e8fb636fd55f59ea660047961490c7ff9566528cdd13b476be1f97b664e7728af80"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000001780)=""/219) [ 117.137215] [ 117.137539] ===================================== [ 117.138271] WARNING: bad unlock balance detected! [ 117.139011] 6.19.0-rc5-next-20260116 #1 Not tainted [ 117.139763] ------------------------------------- [ 117.140483] syz-executor.6/3969 is trying to release lock (rcu_read_lock) at: [ 117.142263] [] __wait_on_freeing_inode+0x105/0x350 [ 117.148049] but there are no more locks to release! [ 117.148802] [ 117.148802] other info that might help us debug this: [ 117.149787] 4 locks held by syz-executor.6/3969: [ 117.150517] #0: ffff88800f7fa3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 117.151883] #1: ffff88801c19aa00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 117.153406] #2: ffff88800f7fe950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 117.154773] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 117.156195] [ 117.156195] stack backtrace: [ 117.156880] CPU: 1 UID: 0 PID: 3969 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 117.156907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.156921] Call Trace: [ 117.156929] [ 117.156938] dump_stack_lvl+0xca/0x120 [ 117.156984] ? __wait_on_freeing_inode+0x105/0x350 [ 117.157012] print_unlock_imbalance_bug+0x118/0x130 [ 117.157040] ? __wait_on_freeing_inode+0x105/0x350 [ 117.157068] lock_release+0x1ee/0x270 [ 117.157096] __wait_on_freeing_inode+0x10a/0x350 [ 117.157125] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 117.157156] ? __pfx_var_wake_function+0x10/0x10 [ 117.157189] ? lock_is_held_type+0x9e/0x120 [ 117.157211] insert_inode_locked+0x25f/0x890 [ 117.157244] __ext4_new_inode+0x223d/0x4cd0 [ 117.157277] ? __pfx___ext4_new_inode+0x10/0x10 [ 117.157305] ? __pfx___dquot_initialize+0x10/0x10 [ 117.157339] ? __pfx_avc_has_perm+0x10/0x10 [ 117.157369] ext4_symlink+0x623/0xb40 [ 117.157405] ? __pfx_ext4_symlink+0x10/0x10 [ 117.157436] ? security_inode_permission+0x72/0xe0 [ 117.157460] vfs_symlink+0x44b/0x840 [ 117.157492] filename_symlinkat+0x158/0x440 [ 117.157520] ? __pfx_filename_symlinkat+0x10/0x10 [ 117.157547] ? strncpy_from_user+0x21b/0x2f0 [ 117.157578] __x64_sys_symlink+0x82/0x110 [ 117.157605] do_syscall_64+0xbf/0x420 [ 117.157630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.157654] RIP: 0033:0x7f575b7c7427 [ 117.157673] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.157694] RSP: 002b:00007fff8ad2fd38 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 117.157715] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f575b7c7427 [ 117.157729] RDX: 00007fff8ad2fe17 RSI: 00007f575b822019 RDI: 00007fff8ad2fe00 [ 117.157744] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff8ad2fbd0 [ 117.157758] R10: 00007fff8ad2fa87 R11: 0000000000000202 R12: 0000000000000001 [ 117.157771] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8ad2fe00 [ 117.157792] [ 117.187387] ------------[ cut here ]------------ [ 117.188203] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.6/3969 [ 117.189922] Modules linked in: [ 117.190484] CPU: 1 UID: 0 PID: 3969 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 117.192090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 117.193417] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 117.194404] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 117.200074] RSP: 0018:ffff8880420ff9a0 EFLAGS: 00010286 [ 117.203181] RAX: 00000000ffffffff RBX: ffff8880413d5280 RCX: ffffffff815660f7 [ 117.204446] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880413d567c [ 117.205609] RBP: ffff8880413d5280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 117.206769] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880413d5280 [ 117.207953] R13: 0000000000000001 R14: ffffffff85c0ed20 R15: ffff88801c328ca0 [ 117.209112] FS: 0000555576072400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 117.210414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.211399] CR2: 0000562539e674c8 CR3: 00000000470ea000 CR4: 0000000000350ef0 [ 117.212569] Call Trace: [ 117.213119] [ 117.214548] __wait_on_freeing_inode+0x10f/0x350 [ 117.216036] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 117.218222] ? __pfx_var_wake_function+0x10/0x10 [ 117.220813] ? lock_is_held_type+0x9e/0x120 [ 117.223044] insert_inode_locked+0x25f/0x890 [ 117.226375] __ext4_new_inode+0x223d/0x4cd0 [ 117.231518] ? __pfx___ext4_new_inode+0x10/0x10 [ 117.234062] ? __pfx___dquot_initialize+0x10/0x10 [ 117.235593] ? __pfx_avc_has_perm+0x10/0x10 [ 117.239259] ext4_symlink+0x623/0xb40 [ 117.243907] ? __pfx_ext4_symlink+0x10/0x10 [ 117.245956] ? security_inode_permission+0x72/0xe0 [ 117.249263] vfs_symlink+0x44b/0x840 [ 117.251924] filename_symlinkat+0x158/0x440 [ 117.254210] ? __pfx_filename_symlinkat+0x10/0x10 [ 117.255808] ? strncpy_from_user+0x21b/0x2f0 [ 117.259595] __x64_sys_symlink+0x82/0x110 [ 117.261157] do_syscall_64+0xbf/0x420 [ 117.262835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.263924] RIP: 0033:0x7f575b7c7427 [ 117.264630] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 117.267575] RSP: 002b:00007fff8ad2fd38 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 117.268819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f575b7c7427 [ 117.269990] RDX: 00007fff8ad2fe17 RSI: 00007f575b822019 RDI: 00007fff8ad2fe00 [ 117.271177] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff8ad2fbd0 [ 117.272350] R10: 00007fff8ad2fa87 R11: 0000000000000202 R12: 0000000000000001 [ 117.273519] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff8ad2fe00 [ 117.278908] [ 117.279294] irq event stamp: 555 [ 117.279905] hardirqs last enabled at (555): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 117.281547] hardirqs last disabled at (554): [] _raw_spin_lock_irqsave+0x53/0x60 [ 117.283208] softirqs last enabled at (550): [] kernel_fpu_end+0x59/0x70 [ 117.284684] softirqs last disabled at (548): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 117.286362] ---[ end trace 0000000000000000 ]--- 17:33:16 executing program 0: r0 = io_uring_setup(0x2ad2, &(0x7f0000000000)={0x0, 0x9fa9, 0x10, 0x0, 0x13b}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84080}, 0x20048800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, r1, 0x110, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf23, 0x64}}}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x24, 0x1}, {0x12, 0x1}, {0x48, 0x1}]}, @measure_req={0x26, 0x58, {0x7, 0x6, 0x2, "983d31c0ef0fe057f3103987ec86304e262fe90897d826ce6610f1e3dc5edb64037c991ac3d69516cd70b4c44bff76ca40d270612d5d2564acd8dc7912088c809f0371086354d62b19715430ff962532f098973f9e"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "237004726be9ffbd6f8c5ae496b66077e9c883eecf2c80119c6011af127471401515d0b4b612fd628bc16f71"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "a8e3d31cf89ed87545764d65"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "8486e0"}], @NL80211_ATTR_IE={0x88, 0x2a, [@tim={0x5, 0x82, {0x5, 0x3, 0x40, "aa81dc495b1d6e8a6bf5d82274fbeb427812c4ee3d17bb0e2ca96b26ae5a7511d0ddc0803245a08582beeb0a5784932f41fd45f7e9dcea62456505c40ed78f6590c42c5a34eccf5b063379691fe3e2912be3412742bbf6bb4958c61e3aa31880cc00f168c9d41ec041fa1c43447201a4ddd2d02f8cd1c7821f9162f3957a92"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "4835fa7b758d83089065cc6b63ec0f75af6c72ebd85806916fcf8bbaac445555fb5f437b431c697aa38a36f83b70ff7126ea9b3b452b96765328a1411ee6c58ce7683015ce0dc5e601c7f371443c69898583200eaf7c9c9ee3f32850c1cc5fd69e337e69d8ca521d8a35a2c3e6618aea42a21e136b80648e61e05bf216967d54e7c0169ea5fd689573087610393d234c4778f6c92c36977d441c41c21f3add54ae915018d33159ac0b2afc9d5ef8f2781e924dd370dd2d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_RRK={0x1c, 0xfc, "7c13abcbfbc81432ba5aaeb1356daaabcdd986d7df773c16"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}], @fils_params]}, 0x254}, 0x1, 0x0, 0x0, 0x24001}, 0x24000004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/rt_cache\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000580)=""/101) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xd0, 0x2a, [@gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0xed}, @tim={0x5, 0xbf, {0x0, 0x47, 0x6, "168f538196354218f25954a157edc5a67fb3ab6bab024ecd1c774d2e851bfdef5bcae525d46ff38a938e285000d56ae77961169403db0c077aac21e5d8b94953d553a0d1a42c2a3b2fe33799d79db420bfc65bce282f2695871456e583bc264f86d4a96996ed45ec4bc51c8ff824abaaa50489dc196284d6f7fcb2abe9aecad73b9ffdba129435980719d1bb42dd58822021d1fa7309ebaecc9c12b3ca0c4539e8ce0267eff7d5ba399d000a360634317a0746a9b5ae67a82ea70953"}}]}]}, 0xec}}, 0x6c265e4ef9202694) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000840)) write$eventfd(r3, &(0x7f0000000880)=0x9, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0xfffffff8, 0x3d2b}}, './file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000900)={0x4a, ""/74}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)={0x364, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d3}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c2}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a39eac19470dc0a76547911a9e1c3ccb007a3302947441cb18be0f9c79b4ca72b63fd2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fae284dde0db40dbe065078e41be4805f178a4e8aa6bbb2cf8adb4372917473950"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "05131b539e3e73b358085623b22d88ad4cbf91dc9ef312db44b3c658e5dc99b33cc1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d757e3944067f3de03a1fb4c058025a46ace12ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x48}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x8800}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x2, 0xfffffeec}}, './file0\x00'}) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000e00)=0xffffffff) 17:33:23 executing program 4: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x1000) shmdt(0x0) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/4096) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000001000)=""/115) shmdt(r0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x40400, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000010c0)=""/204) shmctl$SHM_LOCK(r2, 0xb) r4 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_LOCK(r2, 0xb) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x4000) r6 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f00000011c0)) prctl$PR_SET_NAME(0xf, &(0x7f0000001200)='/dev/vcsa\x00') 17:33:23 executing program 2: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0xdfd1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/224) r1 = socket(0x23, 0x80000, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa83}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc974}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x4ac000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000380)={0x6, 0xbacb, 0x3, 0x8000000, 0x8, 0x3}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x102, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0xc18a67cdc836726d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/stat\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x220, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd083}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0xc0c0}, 0x2004c810) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x40a480, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000880)=0x4) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000008c0)=""/116) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000940)=""/94) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdd, 0xe}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000090}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) 17:33:23 executing program 6: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/4096) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000001040)) lremovexattr(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=@random={'security.', '&\x00'}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001100)=0x20bc5853) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000001140)) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000001180)=0xffff78e5) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) open$dir(&(0x7f0000001340)='./file0\x00', 0x400884, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1000) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000013c0)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001400)) syz_open_dev$evdev(&(0x7f0000001440), 0x2, 0x200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001480)={0x0, {}, 0x0, {}, 0x9, 0x4, 0x13, 0x1, "e32bd32c1f334713c847601e326bd57ae6d91f34f524fcd9393971fc3293bfa084b6ab788d26757f00afd69343fc3c8a689a7d202a8874e12252feadf7524ee6", "7cbb83df1834ee1d07a1755e08f9007cf26c01c8401803c1be412c6b200f6919", [0x3, 0x1ac]}) syz_open_procfs(0x0, &(0x7f0000001540)='children\x00') 17:33:23 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x70}}}}, [""]}, 0x20}}, 0x80) r3 = socket(0x2c, 0x800, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8044000}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x3a8, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b6df7e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfb}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x62f799bb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1cd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff59a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x634}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1b, 0x3, "361753d2da10d3607ed9909b6d65a83c3a83bcf774a0ec"}, @TIPC_NLA_NODE_ID={0x47, 0x3, "7ca654e7466f73ab6b4a824a859a0432d03c9f18a452662f078da3c492a95dc24c64d3a8bc0312be2c57ed39d11caec8563d475766037ddb4b30362a43c43e73f4ae60"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "727549f509761367835112c7f5f11142e9e06ca8625126b00bde9348f1455581572b3e"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "eb0402443ffec0bbaa3c657d18d0c9cdefce95fcecb3fed83421cf63"}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f37cfb3c11dc472655b9e19298120f1c84730d8a0557cd3b5b4c5d5f29c1"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x4000844) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x440}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2e6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1199}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x563}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005001}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='coredump_filter\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r6) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xc12e}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r6, {0x9, 0x1}}, './file0\x00'}) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x621}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x840) 17:33:24 executing program 5: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0xd, 0xd6, &(0x7f0000000000)="cbae8d19c9dde883d9c5c31710b36c28ae57fb8cafa98514821615b27e2ee00742a56b7a9f569e82ac337844e1f1be90a53118c409351791cd8ca1e6b1af1f86802490ac3d82b77ead4dfa745af37533f91887174fb43071ed4fb7f4b0d3aa6083e667ae72384c4d7ee69783b4a257c291241feec26de2913e1ab7631e815891bac7eda7fca397b60123745b500d5f3c7b63107108a4400fab12b075c324fafe0dc2e6158acdd7739a0e95ca31d1e2de953fe53c1adc2967d758154f35b1daddd9e228b26a889e24a9f7cd6fd5b514ac88cfce09f53c"}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/195) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/252) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000340)=""/172) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000540)={0x57, 0x80, 0x1000, {0x1, 0x4}, {0x4, 0x80}, @cond=[{0x69d5, 0x6, 0x0, 0x7, 0xbac, 0x3}, {0x4, 0x7, 0x26, 0x8, 0x7, 0x6}]}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000580)=""/123) syz_open_dev$sg(&(0x7f0000000600), 0x100000000, 0x1) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000640)=""/88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800000, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x4840}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x5, 0xd6}}, './file0\x00'}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x3, 0x6, 0x9, 0x100, 0x3}) r4 = socket(0x23, 0x4, 0x7) bind(r4, &(0x7f0000000940)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) r5 = syz_open_dev$loop(&(0x7f00000009c0), 0x6, 0x400) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x19) 17:33:24 executing program 0: r0 = io_uring_setup(0x2ad2, &(0x7f0000000000)={0x0, 0x9fa9, 0x10, 0x0, 0x13b}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x6f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84080}, 0x20048800) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, r1, 0x110, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf23, 0x64}}}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x24, 0x1}, {0x12, 0x1}, {0x48, 0x1}]}, @measure_req={0x26, 0x58, {0x7, 0x6, 0x2, "983d31c0ef0fe057f3103987ec86304e262fe90897d826ce6610f1e3dc5edb64037c991ac3d69516cd70b4c44bff76ca40d270612d5d2564acd8dc7912088c809f0371086354d62b19715430ff962532f098973f9e"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "237004726be9ffbd6f8c5ae496b66077e9c883eecf2c80119c6011af127471401515d0b4b612fd628bc16f71"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "a8e3d31cf89ed87545764d65"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "8486e0"}], @NL80211_ATTR_IE={0x88, 0x2a, [@tim={0x5, 0x82, {0x5, 0x3, 0x40, "aa81dc495b1d6e8a6bf5d82274fbeb427812c4ee3d17bb0e2ca96b26ae5a7511d0ddc0803245a08582beeb0a5784932f41fd45f7e9dcea62456505c40ed78f6590c42c5a34eccf5b063379691fe3e2912be3412742bbf6bb4958c61e3aa31880cc00f168c9d41ec041fa1c43447201a4ddd2d02f8cd1c7821f9162f3957a92"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "4835fa7b758d83089065cc6b63ec0f75af6c72ebd85806916fcf8bbaac445555fb5f437b431c697aa38a36f83b70ff7126ea9b3b452b96765328a1411ee6c58ce7683015ce0dc5e601c7f371443c69898583200eaf7c9c9ee3f32850c1cc5fd69e337e69d8ca521d8a35a2c3e6618aea42a21e136b80648e61e05bf216967d54e7c0169ea5fd689573087610393d234c4778f6c92c36977d441c41c21f3add54ae915018d33159ac0b2afc9d5ef8f2781e924dd370dd2d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_RRK={0x1c, 0xfc, "7c13abcbfbc81432ba5aaeb1356daaabcdd986d7df773c16"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff9}], @fils_params]}, 0x254}, 0x1, 0x0, 0x0, 0x24001}, 0x24000004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/rt_cache\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000580)=""/101) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xd0, 0x2a, [@gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0xed}, @tim={0x5, 0xbf, {0x0, 0x47, 0x6, "168f538196354218f25954a157edc5a67fb3ab6bab024ecd1c774d2e851bfdef5bcae525d46ff38a938e285000d56ae77961169403db0c077aac21e5d8b94953d553a0d1a42c2a3b2fe33799d79db420bfc65bce282f2695871456e583bc264f86d4a96996ed45ec4bc51c8ff824abaaa50489dc196284d6f7fcb2abe9aecad73b9ffdba129435980719d1bb42dd58822021d1fa7309ebaecc9c12b3ca0c4539e8ce0267eff7d5ba399d000a360634317a0746a9b5ae67a82ea70953"}}]}]}, 0xec}}, 0x6c265e4ef9202694) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000840)) write$eventfd(r3, &(0x7f0000000880)=0x9, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0xfffffff8, 0x3d2b}}, './file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000900)={0x4a, ""/74}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f00000009c0)={0x364, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d3}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c2}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a39eac19470dc0a76547911a9e1c3ccb007a3302947441cb18be0f9c79b4ca72b63fd2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fae284dde0db40dbe065078e41be4805f178a4e8aa6bbb2cf8adb4372917473950"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "05131b539e3e73b358085623b22d88ad4cbf91dc9ef312db44b3c658e5dc99b33cc1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d757e3944067f3de03a1fb4c058025a46ace12ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x48}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x8800}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r0, {0x2, 0xfffffeec}}, './file0\x00'}) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) 17:33:24 executing program 3: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0xdfd1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/224) r1 = socket(0x23, 0x80000, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa83}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc974}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x4ac000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000380)={0x6, 0xbacb, 0x3, 0x8000000, 0x8, 0x3}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x102, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0xc18a67cdc836726d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/stat\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x220, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd083}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0xc0c0}, 0x2004c810) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x40a480, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000880)=0x4) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000008c0)=""/116) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000940)=""/94) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdd, 0xe}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000090}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) 17:33:24 executing program 1: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/150) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/95) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x7) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x6, 0x10001]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x16c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x65}}}}, [@NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x104, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dea10af644e8"}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfa}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x70}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2400c014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10210220}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x575}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x8000, 0x1f, 0x7, 0x100, 0x81, 0x91, 0x6, 0x800, 0x20]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2fc, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x30a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8722}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb0c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcfc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000016c0)={&(0x7f0000000e40)={0x85c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x827, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7ffa}, @device_a, @device_b, @device_a, {0x1, 0x6}, @broadcast}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x0, 0x4}}, './file0\x00'}) VM DIAGNOSIS: 17:33:16 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801f117b10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003e22f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801f117b48 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556c37d400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d530000 CR3=000000000d9a1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff8880420ff4a8 R8 =0000000000000000 R9 =ffffed100169c046 R10=000000000000005f R11=6666666666663c5b R12=000000000000005f R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555576072400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562539e674c8 CR3=00000000470ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000