Warning: Permanently added '[localhost]:61134' (ECDSA) to the list of known hosts.
2025/09/02 03:43:25 fuzzer started
2025/09/02 03:43:25 dialing manager at localhost:35473
syzkaller login: [   49.382651] cgroup: Unknown subsys name 'net'
[   49.429726] cgroup: Unknown subsys name 'cpuset'
[   49.450429] cgroup: Unknown subsys name 'rlimit'
2025/09/02 03:43:36 syscalls: 2214
2025/09/02 03:43:36 code coverage: enabled
2025/09/02 03:43:36 comparison tracing: enabled
2025/09/02 03:43:36 extra coverage: enabled
2025/09/02 03:43:36 setuid sandbox: enabled
2025/09/02 03:43:36 namespace sandbox: enabled
2025/09/02 03:43:36 Android sandbox: enabled
2025/09/02 03:43:36 fault injection: enabled
2025/09/02 03:43:36 leak checking: enabled
2025/09/02 03:43:36 net packet injection: enabled
2025/09/02 03:43:36 net device setup: enabled
2025/09/02 03:43:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/02 03:43:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/02 03:43:36 USB emulation: enabled
2025/09/02 03:43:36 hci packet injection: enabled
2025/09/02 03:43:36 wifi device emulation: enabled
2025/09/02 03:43:36 802.15.4 emulation: enabled
2025/09/02 03:43:36 fetching corpus: 50, signal 17792/19631 (executing program)
2025/09/02 03:43:36 fetching corpus: 100, signal 27191/30691 (executing program)
2025/09/02 03:43:36 fetching corpus: 150, signal 38449/43372 (executing program)
2025/09/02 03:43:37 fetching corpus: 200, signal 44515/50859 (executing program)
2025/09/02 03:43:37 fetching corpus: 250, signal 51501/59059 (executing program)
2025/09/02 03:43:37 fetching corpus: 300, signal 55959/64761 (executing program)
2025/09/02 03:43:37 fetching corpus: 350, signal 61522/71400 (executing program)
2025/09/02 03:43:37 fetching corpus: 400, signal 64237/75351 (executing program)
2025/09/02 03:43:37 fetching corpus: 450, signal 67332/79571 (executing program)
2025/09/02 03:43:37 fetching corpus: 500, signal 70897/84155 (executing program)
2025/09/02 03:43:37 fetching corpus: 550, signal 73242/87598 (executing program)
2025/09/02 03:43:37 fetching corpus: 600, signal 77621/92776 (executing program)
2025/09/02 03:43:38 fetching corpus: 650, signal 79295/95499 (executing program)
2025/09/02 03:43:38 fetching corpus: 700, signal 81928/99027 (executing program)
2025/09/02 03:43:38 fetching corpus: 750, signal 84252/102266 (executing program)
2025/09/02 03:43:38 fetching corpus: 800, signal 86225/105109 (executing program)
2025/09/02 03:43:38 fetching corpus: 850, signal 88698/108335 (executing program)
2025/09/02 03:43:38 fetching corpus: 900, signal 91017/111410 (executing program)
2025/09/02 03:43:38 fetching corpus: 950, signal 92858/114053 (executing program)
2025/09/02 03:43:38 fetching corpus: 1000, signal 93872/115993 (executing program)
2025/09/02 03:43:38 fetching corpus: 1050, signal 95048/118009 (executing program)
2025/09/02 03:43:38 fetching corpus: 1100, signal 96780/120488 (executing program)
2025/09/02 03:43:38 fetching corpus: 1150, signal 98288/122721 (executing program)
2025/09/02 03:43:38 fetching corpus: 1200, signal 100222/125314 (executing program)
2025/09/02 03:43:39 fetching corpus: 1250, signal 102176/127851 (executing program)
2025/09/02 03:43:39 fetching corpus: 1300, signal 103524/129878 (executing program)
2025/09/02 03:43:39 fetching corpus: 1350, signal 104702/131743 (executing program)
2025/09/02 03:43:39 fetching corpus: 1400, signal 107464/134777 (executing program)
2025/09/02 03:43:39 fetching corpus: 1450, signal 108799/136717 (executing program)
2025/09/02 03:43:39 fetching corpus: 1500, signal 110461/138882 (executing program)
2025/09/02 03:43:39 fetching corpus: 1550, signal 111766/140733 (executing program)
2025/09/02 03:43:39 fetching corpus: 1600, signal 113419/142847 (executing program)
2025/09/02 03:43:39 fetching corpus: 1650, signal 115150/144952 (executing program)
2025/09/02 03:43:39 fetching corpus: 1700, signal 116329/146645 (executing program)
2025/09/02 03:43:40 fetching corpus: 1750, signal 117740/148440 (executing program)
2025/09/02 03:43:40 fetching corpus: 1800, signal 119241/150350 (executing program)
2025/09/02 03:43:40 fetching corpus: 1850, signal 120376/151934 (executing program)
2025/09/02 03:43:40 fetching corpus: 1900, signal 121217/153318 (executing program)
2025/09/02 03:43:40 fetching corpus: 1950, signal 122188/154806 (executing program)
2025/09/02 03:43:40 fetching corpus: 2000, signal 123113/156242 (executing program)
2025/09/02 03:43:40 fetching corpus: 2050, signal 123831/157536 (executing program)
2025/09/02 03:43:40 fetching corpus: 2100, signal 124798/158942 (executing program)
2025/09/02 03:43:40 fetching corpus: 2150, signal 125740/160306 (executing program)
2025/09/02 03:43:40 fetching corpus: 2200, signal 126376/161491 (executing program)
2025/09/02 03:43:40 fetching corpus: 2250, signal 127065/162705 (executing program)
2025/09/02 03:43:40 fetching corpus: 2300, signal 128375/164326 (executing program)
2025/09/02 03:43:41 fetching corpus: 2350, signal 128956/165405 (executing program)
2025/09/02 03:43:41 fetching corpus: 2400, signal 130000/166713 (executing program)
2025/09/02 03:43:41 fetching corpus: 2450, signal 130792/167883 (executing program)
2025/09/02 03:43:41 fetching corpus: 2500, signal 131499/168995 (executing program)
2025/09/02 03:43:41 fetching corpus: 2550, signal 132797/170420 (executing program)
2025/09/02 03:43:41 fetching corpus: 2600, signal 134018/171800 (executing program)
2025/09/02 03:43:41 fetching corpus: 2650, signal 134579/172768 (executing program)
2025/09/02 03:43:41 fetching corpus: 2700, signal 135188/173794 (executing program)
2025/09/02 03:43:41 fetching corpus: 2750, signal 137073/175387 (executing program)
2025/09/02 03:43:41 fetching corpus: 2800, signal 137530/176309 (executing program)
2025/09/02 03:43:41 fetching corpus: 2850, signal 138374/177354 (executing program)
2025/09/02 03:43:41 fetching corpus: 2900, signal 138860/178211 (executing program)
2025/09/02 03:43:42 fetching corpus: 2950, signal 139443/179146 (executing program)
2025/09/02 03:43:42 fetching corpus: 3000, signal 140238/180115 (executing program)
2025/09/02 03:43:42 fetching corpus: 3050, signal 140760/180961 (executing program)
2025/09/02 03:43:42 fetching corpus: 3100, signal 141506/181929 (executing program)
2025/09/02 03:43:42 fetching corpus: 3150, signal 142210/182870 (executing program)
2025/09/02 03:43:42 fetching corpus: 3200, signal 142945/183848 (executing program)
2025/09/02 03:43:42 fetching corpus: 3250, signal 143598/184735 (executing program)
2025/09/02 03:43:42 fetching corpus: 3300, signal 144175/185582 (executing program)
2025/09/02 03:43:42 fetching corpus: 3350, signal 144787/186450 (executing program)
2025/09/02 03:43:42 fetching corpus: 3400, signal 145437/187265 (executing program)
2025/09/02 03:43:42 fetching corpus: 3450, signal 145794/188001 (executing program)
2025/09/02 03:43:42 fetching corpus: 3500, signal 146287/188804 (executing program)
2025/09/02 03:43:42 fetching corpus: 3550, signal 146926/189630 (executing program)
2025/09/02 03:43:43 fetching corpus: 3600, signal 147497/190371 (executing program)
2025/09/02 03:43:43 fetching corpus: 3650, signal 148048/191147 (executing program)
2025/09/02 03:43:43 fetching corpus: 3700, signal 148733/191969 (executing program)
2025/09/02 03:43:43 fetching corpus: 3750, signal 149357/192732 (executing program)
2025/09/02 03:43:43 fetching corpus: 3800, signal 150001/193462 (executing program)
2025/09/02 03:43:43 fetching corpus: 3850, signal 150487/194175 (executing program)
2025/09/02 03:43:43 fetching corpus: 3900, signal 151128/194912 (executing program)
2025/09/02 03:43:43 fetching corpus: 3950, signal 151842/195651 (executing program)
2025/09/02 03:43:43 fetching corpus: 4000, signal 152423/196304 (executing program)
2025/09/02 03:43:43 fetching corpus: 4050, signal 152905/196982 (executing program)
2025/09/02 03:43:43 fetching corpus: 4100, signal 153369/197640 (executing program)
2025/09/02 03:43:43 fetching corpus: 4150, signal 153873/198302 (executing program)
2025/09/02 03:43:43 fetching corpus: 4200, signal 154146/198887 (executing program)
2025/09/02 03:43:44 fetching corpus: 4250, signal 155420/199669 (executing program)
2025/09/02 03:43:44 fetching corpus: 4300, signal 156003/200313 (executing program)
2025/09/02 03:43:44 fetching corpus: 4350, signal 156603/201004 (executing program)
2025/09/02 03:43:44 fetching corpus: 4400, signal 157112/201642 (executing program)
2025/09/02 03:43:44 fetching corpus: 4450, signal 157356/202179 (executing program)
2025/09/02 03:43:44 fetching corpus: 4500, signal 157763/202731 (executing program)
2025/09/02 03:43:44 fetching corpus: 4550, signal 158135/203287 (executing program)
2025/09/02 03:43:44 fetching corpus: 4600, signal 158524/203877 (executing program)
2025/09/02 03:43:44 fetching corpus: 4650, signal 159043/204408 (executing program)
2025/09/02 03:43:44 fetching corpus: 4700, signal 159590/204948 (executing program)
2025/09/02 03:43:44 fetching corpus: 4750, signal 160050/205474 (executing program)
2025/09/02 03:43:44 fetching corpus: 4800, signal 160425/205968 (executing program)
2025/09/02 03:43:44 fetching corpus: 4850, signal 160818/206485 (executing program)
2025/09/02 03:43:44 fetching corpus: 4900, signal 161302/206970 (executing program)
2025/09/02 03:43:44 fetching corpus: 4950, signal 161845/207440 (executing program)
2025/09/02 03:43:44 fetching corpus: 5000, signal 162243/207921 (executing program)
2025/09/02 03:43:45 fetching corpus: 5050, signal 162730/208404 (executing program)
2025/09/02 03:43:45 fetching corpus: 5100, signal 163174/208849 (executing program)
2025/09/02 03:43:45 fetching corpus: 5150, signal 163635/209319 (executing program)
2025/09/02 03:43:45 fetching corpus: 5200, signal 164020/209658 (executing program)
2025/09/02 03:43:45 fetching corpus: 5250, signal 164282/209662 (executing program)
2025/09/02 03:43:45 fetching corpus: 5300, signal 164675/209667 (executing program)
2025/09/02 03:43:45 fetching corpus: 5350, signal 165093/209713 (executing program)
2025/09/02 03:43:45 fetching corpus: 5400, signal 165388/209731 (executing program)
2025/09/02 03:43:45 fetching corpus: 5450, signal 165731/209745 (executing program)
2025/09/02 03:43:45 fetching corpus: 5500, signal 166344/209791 (executing program)
2025/09/02 03:43:45 fetching corpus: 5550, signal 166847/209791 (executing program)
2025/09/02 03:43:46 fetching corpus: 5600, signal 167292/209791 (executing program)
2025/09/02 03:43:46 fetching corpus: 5650, signal 167940/209817 (executing program)
2025/09/02 03:43:46 fetching corpus: 5700, signal 168384/209819 (executing program)
2025/09/02 03:43:46 fetching corpus: 5750, signal 169007/209825 (executing program)
2025/09/02 03:43:46 fetching corpus: 5800, signal 169312/209838 (executing program)
2025/09/02 03:43:46 fetching corpus: 5850, signal 169916/209845 (executing program)
2025/09/02 03:43:46 fetching corpus: 5900, signal 170165/209875 (executing program)
2025/09/02 03:43:46 fetching corpus: 5950, signal 170422/209900 (executing program)
2025/09/02 03:43:46 fetching corpus: 6000, signal 170725/209922 (executing program)
2025/09/02 03:43:46 fetching corpus: 6050, signal 171104/209925 (executing program)
2025/09/02 03:43:46 fetching corpus: 6100, signal 171402/209941 (executing program)
2025/09/02 03:43:46 fetching corpus: 6150, signal 171693/209941 (executing program)
2025/09/02 03:43:46 fetching corpus: 6200, signal 171933/209943 (executing program)
2025/09/02 03:43:47 fetching corpus: 6250, signal 172316/209949 (executing program)
2025/09/02 03:43:47 fetching corpus: 6300, signal 172664/209953 (executing program)
2025/09/02 03:43:47 fetching corpus: 6350, signal 173026/209953 (executing program)
2025/09/02 03:43:47 fetching corpus: 6400, signal 173199/209956 (executing program)
2025/09/02 03:43:47 fetching corpus: 6450, signal 173717/209965 (executing program)
2025/09/02 03:43:47 fetching corpus: 6500, signal 174073/209991 (executing program)
2025/09/02 03:43:47 fetching corpus: 6550, signal 174350/210001 (executing program)
2025/09/02 03:43:47 fetching corpus: 6600, signal 174555/210007 (executing program)
2025/09/02 03:43:47 fetching corpus: 6650, signal 174749/210011 (executing program)
2025/09/02 03:43:47 fetching corpus: 6700, signal 175160/210014 (executing program)
2025/09/02 03:43:47 fetching corpus: 6750, signal 175446/210027 (executing program)
2025/09/02 03:43:48 fetching corpus: 6800, signal 175888/210073 (executing program)
2025/09/02 03:43:48 fetching corpus: 6850, signal 176341/210078 (executing program)
2025/09/02 03:43:48 fetching corpus: 6900, signal 176988/210080 (executing program)
2025/09/02 03:43:48 fetching corpus: 6950, signal 177219/210080 (executing program)
2025/09/02 03:43:48 fetching corpus: 7000, signal 177482/210091 (executing program)
2025/09/02 03:43:49 fetching corpus: 7050, signal 177697/210098 (executing program)
2025/09/02 03:43:49 fetching corpus: 7100, signal 177991/210099 (executing program)
2025/09/02 03:43:49 fetching corpus: 7150, signal 178386/210100 (executing program)
2025/09/02 03:43:49 fetching corpus: 7200, signal 178633/210104 (executing program)
2025/09/02 03:43:49 fetching corpus: 7250, signal 179127/210113 (executing program)
2025/09/02 03:43:49 fetching corpus: 7300, signal 179356/210114 (executing program)
2025/09/02 03:43:49 fetching corpus: 7350, signal 179588/210120 (executing program)
2025/09/02 03:43:49 fetching corpus: 7400, signal 179912/210126 (executing program)
2025/09/02 03:43:49 fetching corpus: 7450, signal 180215/210126 (executing program)
2025/09/02 03:43:49 fetching corpus: 7500, signal 180372/210130 (executing program)
2025/09/02 03:43:49 fetching corpus: 7550, signal 180683/210139 (executing program)
2025/09/02 03:43:49 fetching corpus: 7600, signal 180897/210142 (executing program)
2025/09/02 03:43:50 fetching corpus: 7650, signal 181273/210143 (executing program)
2025/09/02 03:43:50 fetching corpus: 7700, signal 181446/210145 (executing program)
2025/09/02 03:43:50 fetching corpus: 7750, signal 181881/210145 (executing program)
2025/09/02 03:43:50 fetching corpus: 7800, signal 182188/210145 (executing program)
2025/09/02 03:43:50 fetching corpus: 7850, signal 182475/210157 (executing program)
2025/09/02 03:43:50 fetching corpus: 7900, signal 182850/210166 (executing program)
2025/09/02 03:43:50 fetching corpus: 7950, signal 183221/210166 (executing program)
2025/09/02 03:43:50 fetching corpus: 8000, signal 183478/210169 (executing program)
2025/09/02 03:43:50 fetching corpus: 8050, signal 183716/210184 (executing program)
2025/09/02 03:43:50 fetching corpus: 8100, signal 184000/210189 (executing program)
2025/09/02 03:43:50 fetching corpus: 8150, signal 184321/210189 (executing program)
2025/09/02 03:43:50 fetching corpus: 8200, signal 184847/210189 (executing program)
2025/09/02 03:43:51 fetching corpus: 8250, signal 185249/210251 (executing program)
2025/09/02 03:43:51 fetching corpus: 8300, signal 185512/210256 (executing program)
2025/09/02 03:43:51 fetching corpus: 8350, signal 185890/210265 (executing program)
2025/09/02 03:43:51 fetching corpus: 8400, signal 186297/210267 (executing program)
2025/09/02 03:43:51 fetching corpus: 8450, signal 186658/210268 (executing program)
2025/09/02 03:43:51 fetching corpus: 8500, signal 186914/210269 (executing program)
2025/09/02 03:43:51 fetching corpus: 8550, signal 187224/210328 (executing program)
2025/09/02 03:43:51 fetching corpus: 8600, signal 187503/210342 (executing program)
2025/09/02 03:43:51 fetching corpus: 8650, signal 187871/210347 (executing program)
2025/09/02 03:43:51 fetching corpus: 8700, signal 188119/210356 (executing program)
2025/09/02 03:43:51 fetching corpus: 8750, signal 188348/210356 (executing program)
2025/09/02 03:43:51 fetching corpus: 8800, signal 188547/210365 (executing program)
2025/09/02 03:43:52 fetching corpus: 8850, signal 188858/210388 (executing program)
2025/09/02 03:43:52 fetching corpus: 8900, signal 189110/210391 (executing program)
2025/09/02 03:43:52 fetching corpus: 8950, signal 189300/210391 (executing program)
2025/09/02 03:43:52 fetching corpus: 9000, signal 189519/210405 (executing program)
2025/09/02 03:43:52 fetching corpus: 9050, signal 189752/210405 (executing program)
2025/09/02 03:43:52 fetching corpus: 9100, signal 190117/210405 (executing program)
2025/09/02 03:43:52 fetching corpus: 9150, signal 190423/210408 (executing program)
2025/09/02 03:43:52 fetching corpus: 9200, signal 190732/210413 (executing program)
2025/09/02 03:43:52 fetching corpus: 9250, signal 190878/210413 (executing program)
2025/09/02 03:43:52 fetching corpus: 9300, signal 191115/210416 (executing program)
2025/09/02 03:43:52 fetching corpus: 9350, signal 191360/210417 (executing program)
2025/09/02 03:43:52 fetching corpus: 9400, signal 191576/210427 (executing program)
2025/09/02 03:43:53 fetching corpus: 9450, signal 191835/210429 (executing program)
2025/09/02 03:43:53 fetching corpus: 9500, signal 192070/210444 (executing program)
2025/09/02 03:43:53 fetching corpus: 9550, signal 192362/210444 (executing program)
2025/09/02 03:43:53 fetching corpus: 9600, signal 192773/210446 (executing program)
2025/09/02 03:43:53 fetching corpus: 9650, signal 193012/210447 (executing program)
2025/09/02 03:43:53 fetching corpus: 9700, signal 193294/210458 (executing program)
2025/09/02 03:43:53 fetching corpus: 9750, signal 193454/210459 (executing program)
2025/09/02 03:43:53 fetching corpus: 9800, signal 193691/210459 (executing program)
2025/09/02 03:43:53 fetching corpus: 9850, signal 193981/210462 (executing program)
2025/09/02 03:43:53 fetching corpus: 9900, signal 194177/210479 (executing program)
2025/09/02 03:43:53 fetching corpus: 9950, signal 194466/210481 (executing program)
2025/09/02 03:43:53 fetching corpus: 10000, signal 194708/210488 (executing program)
2025/09/02 03:43:54 fetching corpus: 10050, signal 194822/210492 (executing program)
2025/09/02 03:43:54 fetching corpus: 10100, signal 195069/210494 (executing program)
2025/09/02 03:43:54 fetching corpus: 10150, signal 195300/210496 (executing program)
2025/09/02 03:43:54 fetching corpus: 10200, signal 195506/210506 (executing program)
2025/09/02 03:43:54 fetching corpus: 10250, signal 195695/210509 (executing program)
2025/09/02 03:43:54 fetching corpus: 10300, signal 195893/210510 (executing program)
2025/09/02 03:43:54 fetching corpus: 10350, signal 196117/210520 (executing program)
2025/09/02 03:43:54 fetching corpus: 10400, signal 196332/210522 (executing program)
2025/09/02 03:43:55 fetching corpus: 10450, signal 196570/210532 (executing program)
2025/09/02 03:43:55 fetching corpus: 10500, signal 196766/210545 (executing program)
2025/09/02 03:43:55 fetching corpus: 10550, signal 197033/210547 (executing program)
2025/09/02 03:43:55 fetching corpus: 10600, signal 197356/210547 (executing program)
2025/09/02 03:43:55 fetching corpus: 10648, signal 197690/210555 (executing program)
2025/09/02 03:43:55 fetching corpus: 10648, signal 197690/210555 (executing program)
2025/09/02 03:43:57 starting 8 fuzzer processes
03:43:57 executing program 0:
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
shmctl$IPC_RMID(0x0, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/97)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x400)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x1, 0xee00, r0, 0xee01, 0xee00, 0x0, 0x4}, 0x3f, 0x1, 0xbd, 0x0, 0xffffffffffffffff, 0x0, 0xa747})
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
chroot(&(0x7f00000001c0)='./file0\x00')
shmctl$SHM_LOCK(0x0, 0xb)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r1 = shmget(0x3, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
r2 = shmget(0x2, 0xc000, 0x100, &(0x7f0000ff2000/0xc000)=nil)
shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000200))
fspick(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000280))
shmctl$IPC_RMID(r2, 0x0)
r3 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f00000002c0)=""/83)
umount2(&(0x7f0000000340)='./file0\x00', 0x2)

03:43:57 executing program 1:
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security', 0x106c0, 0x20)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x4aca, 0x600400)
pread64(r1, &(0x7f00000002c0)=""/102, 0x66, 0x2)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048080}, 0x400)
flock(r0, 0x4)
r2 = openat2(r0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x10300, 0x102, 0x18}, 0x18)
ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d0}, 0x808c)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x14, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10)
ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000700)={@lba=0x20, 0x1, 0x28, &(0x7f00000006c0)=""/40})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r3)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xc16753cc995de4be}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r5=>r0, {0x4}}, './file0\x00'})
sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x320, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf6c34000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x14c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40540000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff0d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70a7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x2000c801}, 0x800)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/class/ata_port', 0x4000, 0x84)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000d40)={0x20, 0xff}, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000000dc0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc, &(0x7f0000000e40)=[{&(0x7f0000000e00)={0x20, 0x2a, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x67, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0x7fff}]}, 0x20}], 0x1, &(0x7f00000034c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r6, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x50, 0x4000000}, 0x800)

03:43:57 executing program 2:
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000000))
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000040)={0xfffffff8, 0x3, 0x101, 0x3, 0x9, 0x9, 0x1ff})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000008980)={'gretap0\x00', &(0x7f00000088c0)={'tunl0\x00', <r1=>0x0, 0x8, 0x8000, 0x13f3603, 0x9, {{0x1c, 0x4, 0x0, 0x3c, 0x70, 0x64, 0x0, 0xff, 0x0, 0x0, @private=0xa010102, @private=0xa010100, {[@generic={0x86, 0x8, "819f4b3aa68d"}, @end, @ssrr={0x89, 0x1b, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp_addr={0x44, 0xc, 0x53, 0x1, 0xe, [{@broadcast, 0xfff}]}, @ssrr={0x89, 0x27, 0xd1, [@remote, @private=0xa010102, @loopback, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @loopback]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000008d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000008d00)={&(0x7f00000089c0)={0x32c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000008d80), 0x105000, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000008dc0), 0x64000, 0x0)
r4 = socket(0x25, 0x800, 0x2)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000008e00)={r3, r4, 0x5})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000008e40))
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000008ec0), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000008f80)={&(0x7f0000008e80), 0xc, &(0x7f0000008f40)={&(0x7f0000008f00)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x60d0, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd91}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8f}]}, 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000008fc0)={{0x1, 0x1, 0x18, <r6=>r3, {0x3ff}}, './file0\x00'})
r7 = creat(&(0x7f0000009000)='./file0\x00', 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000009040)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000009140)={'syztnl2\x00', &(0x7f00000090c0)={'sit0\x00', <r8=>r1, 0x4, 0x5, 0x9, 0x101, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x10, 0x8000, 0x0, 0x5c9}})
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000092c0)={<r9=>0x0, @loopback, @multicast2}, &(0x7f0000009300)=0xc)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000009400)={&(0x7f0000009080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000093c0)={&(0x7f0000009340)={0x6c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x176f739a7b62b689}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004}, 0x44040)

03:43:57 executing program 4:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r0=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xaa26, 0x1d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x4)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0xe}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4000000)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140021}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x24000800)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1c}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0xfff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7fc}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x307}, {0x8, 0x13, 0x80}, {0x5}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40880}, 0x48051)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000840))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc83899c425024493}, 0x40000)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2, 0x6e}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x21)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r2)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r5, 0x2, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0xd5)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)={0x28c, r6, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xbe}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xb83}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7f}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_IE={0x19e, 0x2a, [@fast_bss_trans={0x37, 0x52, {0x1, 0x0, "44b69bbea01d54c0ceb920b921219f6c", "6752a72f21790eddd4ec70d5e352d12560f313aeb1f3f5a1199e996e43966f6c", "fbf7b599e3ebf225eddc71b298cf43f3bf0b5c91ca5f2c2323892d359c66f6a3"}}, @random_vendor={0xdd, 0xd8, "524aa6baf5f5a23db85cc4553695ac91cf9822abf45b712c53a63c98789bbe46f3aab6784db8fda58fcc904f200abbc236c50bfc23a685ddb32c1da8d3d985202f6f06658d56758bf6e5f16d10bbb6d1bf335a9f2b0d4d78d9bf4e43fdb5a183227d36c32a889a7539368885ff3dddb220a52e60cdca0a6600bfad8af3c19200686ecd16fa6e7d77b1028d0fbe78041d6ab4a14a9463566d09db1f4362b527bc428fe57c18da85cfbe66532dacbae23116a3b52f4930738b91a36460cfef91bc7833e91a551a1d4023265f207bdb8c30484808ee344485a2"}, @mic={0x8c, 0x10, {0x7ce, "46b8caceebaf", @short="b34f283610462c87"}}, @measure_req={0x26, 0x58, {0xe6, 0x8, 0x7f, "9158b682a2efc23edf1150ad365344cd71816999217cca5bedce54712c9f4ca09cd27b043c0a24f3d1bae565a8bfbbc9325756a78ea495a2bd00a2b5aa696d50d28d8ba3918c6c3a279b41f8bb62cc337278ce306e"}}]}, @NL80211_ATTR_SCAN_SSIDS={0xa0, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x15, 0x0, @random="71196088b0a027611dfbdb1e0fafa322f1"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x22, 0x0, @random="a419817ebb82e8593ab068a7d8fa6f439b417d67187c39fc36f3248b9378"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008014)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001580)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001040)={0x4e8, r7, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x67}}}}, [@NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x76}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x420, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x3f, 0x3, 0x400, 0x2, 0x69c2, 0x100]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x9}, {0x5, 0x5}, {0x1, 0x1}, {0x5}, {0x5, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x3}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x2, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x7}, {0x2, 0x5}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x7}, {0x5, 0x4}, {0x5}, {0x7, 0x8}, {0x5, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x6}, {0x4, 0x5}, {}, {0x4, 0x2}, {0x6}, {0x0, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x6aa7d9f3330126f}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x16, 0x16, 0x3, 0x16, 0xa4, 0x60, 0x4, 0x9, 0x30, 0x48, 0x9, 0x30, 0x9, 0x36, 0x16, 0x60, 0x3, 0x30, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xfffa, 0xb895, 0x400, 0x6, 0xfff, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x2}, {0x5, 0x6}, {0x7, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x9}, {0x6, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x7}, {0x6}, {0x5, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0x8}, {0x1}, {0x6, 0x6}, {0x3, 0xa}, {0x2, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x8, 0x36, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x22, 0x1, 0x7fff, 0x1, 0x5, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x2, 0x2, 0x5, 0x2, 0x79, 0x2, 0x5, 0x36, 0x5, 0x48]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x7}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x4}, {0x3, 0x1}, {0x7, 0x5}, {0x3}, {0x7, 0xa}, {0x7, 0x8}, {}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0x2}, {0x1, 0x5}, {}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0x9}, {0x6, 0x9}, {0x6, 0x1}, {0x2, 0x1}, {0x6, 0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x3, 0x4}, {}, {0x5, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x3, 0x3}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x12, 0x16, 0x36]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0xa}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x1}, {0x5}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x4}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x1}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x3}, {}, {0x7}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x2}, {0x3, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x3f, 0x80, 0x401, 0x3e5, 0x397, 0xfff9]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x6}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x4}, {0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x6}, {0x6, 0x9}, {0x7, 0xa}, {0x2}, {0x1, 0x8}, {0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x4, 0x4}, {0x3, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x2}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x18, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0xfff, 0x8000, 0x5, 0x2, 0x100, 0xcdb6]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x1, 0x36, 0x9, 0x6, 0x24, 0x16, 0x6, 0xc, 0x3, 0x6, 0x13, 0x29, 0x12, 0x5, 0x1, 0x30, 0x3, 0x1b, 0x6, 0xe7f6f3d25e51925c, 0x3, 0x30, 0x5, 0x39, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x8}, {0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x5, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x7}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x4}, {0x6, 0x8}, {0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0x8}, {0x6, 0x1}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x6, 0x8, 0x5, 0x8, 0x0, 0x7, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0x1, 0x53, 0xee, 0xfffa, 0xfff9, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a4e, 0x9, 0x76, 0x3, 0xfff7, 0x401, 0x3, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x4, 0x0, 0x9, 0x4, 0x3, 0xd7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x4}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x5, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {}, {0x4, 0x9}, {0x2, 0xa}, {0x2}, {0x7, 0x8}, {0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x3}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x5}, {0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0x8}, {0x5}, {0x7, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x89}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfe27}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3dea}]}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

03:43:57 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x40440c0)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8001)
sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8675, 0x58}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50001}, 0x84)
clock_gettime(0x0, &(0x7f0000002980)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f0000002940)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000002840)=[{&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/221, 0xdd}, {&(0x7f0000002780)=""/167, 0xa7}], 0x8, &(0x7f00000028c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x1, 0x0, &(0x7f00000029c0)={r3, r4+10000000})
r7 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xff, 0xf9, 0x5, 0x40, 0x0, 0xfffffffffffff801, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd610, 0x2, @perf_config_ext={0x9, 0x6}, 0x40040, 0x2, 0x63, 0x2, 0x1, 0x2, 0x200, 0x0, 0x4, 0x0, 0x100}, r6, 0x5, r2, 0x2)
bind$unix(r5, &(0x7f0000002a00)=@file={0x0, './file0\x00'}, 0x6e)
r8 = signalfd4(r7, &(0x7f0000002a80)={[0x100]}, 0x8, 0x800)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b00), r2)
sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000002e40)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002b40)={0x290, r9, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @remote, 0x7}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x11ad}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x455}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x77}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff63}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5e46}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc1b}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x5}, 0x20)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8001}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048010}, 0x800)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x28, r10, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fff, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003100), r8)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003140)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000003240)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x48, r11, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x3c}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040094}, 0x4000)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), r8)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x14, r13, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x800)

03:43:57 executing program 5:
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
r0 = socket$unix(0x1, 0x1, 0x0)
getsockname$unix(r0, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e)
bind$unix(r0, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r1 = creat(&(0x7f00000006c0)='./file0\x00', 0x148)
r2 = accept4$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00'})
getpeername$unix(r0, &(0x7f00000007c0), &(0x7f0000000840)=0x6e)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008051}, 0x4040)
accept4(r0, &(0x7f0000000980)=@alg, &(0x7f0000000a00)=0x80, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x36, 0xa06, 0x53, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x7, 0x200, 0x1}})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x96000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})
unlink(&(0x7f0000000b80)='./file0\x00')
connect$unix(r0, &(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e)
r4 = syz_open_dev$vcsu(&(0x7f0000000c40), 0xe5, 0x200)
sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="bd6509b33560"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="89f3463751f0"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="60ecc08f9119"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004805)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e00), 0x200)
splice(r5, &(0x7f0000000e40)=0x1, r0, &(0x7f0000000e80)=0x1, 0x4, 0x1)
bind$unix(0xffffffffffffffff, &(0x7f0000000f00)=@abs={0xc15a6f928f60eada, 0x0, 0x4e20}, 0x6e)

03:43:57 executing program 6:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x10000)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='#-\x00', 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1f, 0x2200)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000240)='mand\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x42}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x22044840}, 0x4000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x80000000, 0x1f})
ftruncate(r2, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x14)
ftruncate(r3, 0x428)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = fsmount(r4, 0x1, 0x1)
open_by_handle_at(r3, &(0x7f00000007c0)=@isofs={0x14, 0x1, {0x81, 0x9, 0x101, 0x6, 0xfffffff8, 0x9}}, 0x284100)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000800)='TIPC\x00', &(0x7f0000000840)='broadcast-link\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000880)={0x0, 0x1, 0xfff, 0x5})
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000008c0)={0x8, 0x6})
getsockopt$netlink(r4, 0x10e, 0x7, &(0x7f0000000900)=""/51, &(0x7f0000000940)=0x33)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
lseek(r2, 0x1f, 0x3)

03:43:57 executing program 7:
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x100, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x890)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, r0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe6d6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff)
r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x11e)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x52}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x473c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x48800)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x600000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r5=>r4, {0x7}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1bc, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x128, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x46dca78b8742ab2e}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40)
sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000880}, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001140)={0x230, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4000c005)

[   81.255055] audit: type=1400 audit(1756784638.002:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   82.409842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.412333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.415416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.420318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.423980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.531402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.536735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.540079] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.546022] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.548155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.592907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.598737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.601252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.607324] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.611864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.614790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.618718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.622424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.626505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.629152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.667282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   82.676383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.678720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.681771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.685677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.690763] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   82.695433] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.700786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   82.720363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.723199] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.726066] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   82.727793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.734782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   82.736419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.747196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.747978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.754820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   82.755665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.780330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.785206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.503127] Bluetooth: hci0: command tx timeout
[   84.566523] Bluetooth: hci1: command tx timeout
[   84.695909] Bluetooth: hci3: command tx timeout
[   84.759338] Bluetooth: hci2: command tx timeout
[   84.822524] Bluetooth: hci5: command tx timeout
[   84.822589] Bluetooth: hci6: command tx timeout
[   84.823407] Bluetooth: hci7: command tx timeout
[   84.886587] Bluetooth: hci4: command tx timeout
[   86.550553] Bluetooth: hci0: command tx timeout
[   86.614665] Bluetooth: hci1: command tx timeout
[   86.743468] Bluetooth: hci3: command tx timeout
[   86.806765] Bluetooth: hci2: command tx timeout
[   86.870971] Bluetooth: hci5: command tx timeout
[   86.871522] Bluetooth: hci6: command tx timeout
[   86.871763] Bluetooth: hci7: command tx timeout
[   86.934714] Bluetooth: hci4: command tx timeout
[   88.598582] Bluetooth: hci0: command tx timeout
[   88.662697] Bluetooth: hci1: command tx timeout
[   88.790564] Bluetooth: hci3: command tx timeout
[   88.854608] Bluetooth: hci2: command tx timeout
[   88.918655] Bluetooth: hci5: command tx timeout
[   88.919120] Bluetooth: hci6: command tx timeout
[   88.919614] Bluetooth: hci7: command tx timeout
[   88.982545] Bluetooth: hci4: command tx timeout
[   90.648530] Bluetooth: hci0: command tx timeout
[   90.710772] Bluetooth: hci1: command tx timeout
[   90.839592] Bluetooth: hci3: command tx timeout
[   90.902540] Bluetooth: hci2: command tx timeout
[   90.966533] Bluetooth: hci7: command tx timeout
[   90.966982] Bluetooth: hci5: command tx timeout
[   90.967639] Bluetooth: hci6: command tx timeout
[   91.030590] Bluetooth: hci4: command tx timeout
[  127.841377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.842458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.024748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.025363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:44:45 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000140), 0x4)
process_madvise(r3, 0x0, 0x0, 0xc, 0x0)
process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="985d7063c4fa937d893054d2eb0e006875c995e6bfb20782612b0e99deb2059d378e3c6b26cb00105b4168e212c3939fee28c955fb210c3b43b4689fe485d3e36116f42facd8cede5c604173afeff046", 0x50}, {&(0x7f0000000100)="5934d6abb7bd0f917a4f928e9227f7f18132a1bb5590e917697d7529e3be0fae51a0600b63ff4adac8d86b727ead244e9522b848f2b1028d66f1d2cd46641236fc52bbfe77f9a42d32f40e17d10c83f4050f88998248", 0x56}], 0x2, 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000500000016d3000021000100f7ffffff0100000003000000"], 0x800)

03:44:45 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000140), 0x4)
process_madvise(r3, 0x0, 0x0, 0xc, 0x0)
process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="985d7063c4fa937d893054d2eb0e006875c995e6bfb20782612b0e99deb2059d378e3c6b26cb00105b4168e212c3939fee28c955fb210c3b43b4689fe485d3e36116f42facd8cede5c604173afeff046", 0x50}, {&(0x7f0000000100)="5934d6abb7bd0f917a4f928e9227f7f18132a1bb5590e917697d7529e3be0fae51a0600b63ff4adac8d86b727ead244e9522b848f2b1028d66f1d2cd46641236fc52bbfe77f9a42d32f40e17d10c83f4050f88998248", 0x56}], 0x2, 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000500000016d3000021000100f7ffffff0100000003000000"], 0x800)

03:44:45 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000140), 0x4)
process_madvise(r3, 0x0, 0x0, 0xc, 0x0)
process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="985d7063c4fa937d893054d2eb0e006875c995e6bfb20782612b0e99deb2059d378e3c6b26cb00105b4168e212c3939fee28c955fb210c3b43b4689fe485d3e36116f42facd8cede5c604173afeff046", 0x50}, {&(0x7f0000000100)="5934d6abb7bd0f917a4f928e9227f7f18132a1bb5590e917697d7529e3be0fae51a0600b63ff4adac8d86b727ead244e9522b848f2b1028d66f1d2cd46641236fc52bbfe77f9a42d32f40e17d10c83f4050f88998248", 0x56}], 0x2, 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000500000016d3000021000100f7ffffff0100000003000000"], 0x800)

03:44:45 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000140), 0x4)
process_madvise(r3, 0x0, 0x0, 0xc, 0x0)
process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="985d7063c4fa937d893054d2eb0e006875c995e6bfb20782612b0e99deb2059d378e3c6b26cb00105b4168e212c3939fee28c955fb210c3b43b4689fe485d3e36116f42facd8cede5c604173afeff046", 0x50}, {&(0x7f0000000100)="5934d6abb7bd0f917a4f928e9227f7f18132a1bb5590e917697d7529e3be0fae51a0600b63ff4adac8d86b727ead244e9522b848f2b1028d66f1d2cd46641236fc52bbfe77f9a42d32f40e17d10c83f4050f88998248", 0x56}], 0x2, 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000500000016d3000021000100f7ffffff0100000003000000"], 0x800)

03:44:45 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000140), 0x4)
process_madvise(r3, 0x0, 0x0, 0xc, 0x0)
process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="985d7063c4fa937d893054d2eb0e006875c995e6bfb20782612b0e99deb2059d378e3c6b26cb00105b4168e212c3939fee28c955fb210c3b43b4689fe485d3e36116f42facd8cede5c604173afeff046", 0x50}, {&(0x7f0000000100)="5934d6abb7bd0f917a4f928e9227f7f18132a1bb5590e917697d7529e3be0fae51a0600b63ff4adac8d86b727ead244e9522b848f2b1028d66f1d2cd46641236fc52bbfe77f9a42d32f40e17d10c83f4050f88998248", 0x56}], 0x2, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

[  129.069283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.070460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:44:45 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000140), 0x4)
process_madvise(r3, 0x0, 0x0, 0xc, 0x0)
process_madvise(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="985d7063c4fa937d893054d2eb0e006875c995e6bfb20782612b0e99deb2059d378e3c6b26cb00105b4168e212c3939fee28c955fb210c3b43b4689fe485d3e36116f42facd8cede5c604173afeff046", 0x50}, {&(0x7f0000000100)="5934d6abb7bd0f917a4f928e9227f7f18132a1bb5590e917697d7529e3be0fae51a0600b63ff4adac8d86b727ead244e9522b848f2b1028d66f1d2cd46641236fc52bbfe77f9a42d32f40e17d10c83f4050f88998248", 0x56}], 0x2, 0x0, 0x0)

[  129.180695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.181310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:44:45 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
pidfd_open(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000140), 0x4)
process_madvise(r2, 0x0, 0x0, 0xc, 0x0)

03:44:46 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
pidfd_open(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000140), 0x4)

[  129.355890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.356575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.458363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.459253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.534330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.535012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.738910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.739583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.870799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.871546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.008013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.008728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.521359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.521979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.625148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.625804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.722865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.723589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.724501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.725080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.782790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.783388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.857544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.858168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.045662] audit: type=1400 audit(1756784687.765:8): avc:  denied  { open } for  pid=3937 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
03:45:00 executing program 7:
socket$inet(0x2, 0x6, 0x1000000c)
syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@end]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "20937c4ce6bf53324e3fd3ca2707a8092a2ff5d42eb31a661cc3cd6ea6d0133c", "c538df2eabede21c2be8aa0d3df877a7", {"fc0a2e74062eace7149ae53eb80191d1", "97a696bb38fed5ea32b2238a3fe9ac2f"}}}}}}}, 0x0)

03:45:00 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
pidfd_open(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)

03:45:00 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x3f)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58)

03:45:00 executing program 4:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x800820, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX=r0])

03:45:00 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0)=0x10001, 0x4)
syz_emit_ethernet(0x6c, &(0x7f00000003c0)=ANY=[], 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000140), 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x5}, 0x4)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000080)=[{r0, 0x30}], 0x1, &(0x7f0000000100)={r3, r4+10000000}, 0x0, 0x0)

03:45:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="11000400", @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x240080d5}, 0x20040060)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000500)='bridge_slave_1\x00')
r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x7)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = creat(&(0x7f00000003c0)='./file0\x00', 0xa4ea4d52e7e4bfdf)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7)
fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0x40086607, &(0x7f0000000640)=ANY=[@ANYBLOB="0006"])

03:45:00 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x202840, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000e54400000008000300accc4023729dcfc90b75c7cbcb09595857889f127160f5df4bdd9b8fc13544bf9732eb1041ecb0eda9593dee601e5d0228319214d686fc256e32ba9893884d98f06e39af2c3b0616d5fbc1045353d39d5ca26f7eda642058d53197d92b3dfdd8c6c351735b79a58f791c08a1026d09ff45ef420c0403ae88e984e30effffff7f2a", @ANYRES32=r7, @ANYBLOB="0a0018000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05000000000000000000e95ac93b7beea6e1", @ANYRES32=r7, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r5, 0x7fffffff)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)

[  143.413100] audit: type=1400 audit(1756784700.159:9): avc:  denied  { kernel } for  pid=3952 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  143.423417] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted
[  143.494567] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted
[  143.525164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  143.575318] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
03:45:09 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r2, 0x1)
keyctl$invalidate(0x15, r3)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000640)={r3}, &(0x7f0000000680)={'enc=', 'oaep', ' hash=', {'crc32c\x00'}}, 0x0, 0x0)

03:45:09 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0)=0x10001, 0x4)
syz_emit_ethernet(0x6c, &(0x7f00000003c0)=ANY=[], 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000140), 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x5}, 0x4)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000080)=[{r0, 0x30}], 0x1, &(0x7f0000000100)={r3, r4+10000000}, 0x0, 0x0)

03:45:09 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = epoll_create(0x6)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

03:45:09 executing program 6:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0x35, 0x0, 0x0, 0x3}, {0x6}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000140), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180))
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r4 = dup3(r0, r3, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x8001, 0x8, 0x4, 0x0, 0x1, [{0xffff, 0x8, 0x800, '\x00', 0x687}]})
eventfd(0x8001)
flock(r4, 0x0)

03:45:09 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
pidfd_open(r0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

03:45:09 executing program 4:
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x800, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@none, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19)
getdents64(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c)
syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000010106000000ea1eb951"])
syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b42038000"], 0xf)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)

03:45:09 executing program 1:
syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9)
syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x5f}, @l2cap_cid_signaling={{0x5b}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x4c, 0x2}, {0x2}}, @l2cap_conf_rsp={{0x5, 0x2, 0x51}, {0x7fff, 0x3, 0x0, [@l2cap_conf_flushto={0x2, 0x2, 0x7fff}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x14}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x84, 0xffffffda, 0x800, 0x3}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x4, 0x7, 0x20, 0xffff}}, @l2cap_conf_mtu={0x1, 0x2, 0xba02}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x2, 0x4, 0x2, 0x0, 0x94}}, @l2cap_conf_flushto={0x2, 0x2, 0x37d5}, @l2cap_conf_mtu={0x1, 0x2}]}}]}}, 0x64)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54)
getdents64(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c)
syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000)
faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85})
syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)

03:45:09 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4)
r5 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r6 = dup(r5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r6, 0x0)

[  153.011875] Bluetooth: hci6: SCO packet for unknown connection handle 0
[  153.011963] Bluetooth: Unexpected continuation frame (len 20)
[  153.015753] Bluetooth: hci6: link tx timeout
[  153.016777] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.046653] audit: type=1326 audit(1756784709.789:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3984 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6a4c7b19 code=0x0
03:45:09 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
pidfd_open(r0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  153.084771] Bluetooth: Unexpected continuation frame (len 16)
[  153.096126] kmemleak: Found object by alias at 0x607f1a63e304
[  153.096152] CPU: 1 UID: 0 PID: 3976 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  153.096185] Tainted: [W]=WARN
[  153.096192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.096205] Call Trace:
[  153.096211]  <TASK>
[  153.096219]  dump_stack_lvl+0xca/0x120
[  153.096262]  __lookup_object+0x94/0xb0
[  153.096292]  delete_object_full+0x27/0x70
[  153.096325]  free_percpu+0x30/0x1160
[  153.096358]  ? arch_uprobe_clear_state+0x16/0x140
[  153.096394]  futex_hash_free+0x38/0xc0
[  153.096419]  mmput+0x2d3/0x390
[  153.096463]  do_exit+0x79d/0x2970
[  153.096495]  ? __pfx_do_exit+0x10/0x10
[  153.096522]  ? find_held_lock+0x2b/0x80
[  153.096555]  ? get_signal+0x835/0x2340
[  153.096591]  do_group_exit+0xd3/0x2a0
[  153.096620]  get_signal+0x2315/0x2340
[  153.096650]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  153.096675]  ? __call_rcu_common.constprop.0+0x4c1/0x960
[  153.096709]  ? __pfx_get_signal+0x10/0x10
[  153.096740]  ? __schedule+0xe91/0x3590
[  153.096777]  arch_do_signal_or_restart+0x80/0x790
[  153.096809]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  153.096840]  ? __x64_sys_futex+0x1c9/0x4d0
[  153.096863]  ? __x64_sys_futex+0x1d2/0x4d0
[  153.096889]  ? __do_sys_add_key+0x2ad/0x440
[  153.096922]  ? __pfx___x64_sys_futex+0x10/0x10
[  153.096957]  exit_to_user_mode_loop+0x8b/0x110
[  153.096980]  do_syscall_64+0x2f7/0x360
[  153.097003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.097025] RIP: 0033:0x7ff1a57a9b19
[  153.097042] Code: Unable to access opcode bytes at 0x7ff1a57a9aef.
[  153.097051] RSP: 002b:00007ff1a2d1f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  153.097072] RAX: 0000000000000001 RBX: 00007ff1a58bcf68 RCX: 00007ff1a57a9b19
[  153.097086] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff1a58bcf6c
[  153.097099] RBP: 00007ff1a58bcf60 R08: 0000000000000016 R09: 0000000000000000
[  153.097112] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007ff1a58bcf6c
[  153.097125] R13: 00007fff2f59db8f R14: 00007ff1a2d1f300 R15: 0000000000022000
[  153.097154]  </TASK>
[  153.097161] kmemleak: Object (percpu) 0x607f1a63e300 (size 8):
[  153.097174] kmemleak:   comm "syz-executor.4", pid 3977, jiffies 4294819947
[  153.097187] kmemleak:   min_count = 1
[  153.097194] kmemleak:   count = 0
[  153.097201] kmemleak:   flags = 0x21
[  153.097208] kmemleak:   checksum = 0
[  153.097214] kmemleak:   backtrace:
[  153.097220]  pcpu_alloc_noprof+0x87a/0x1170
[  153.097249]  alloc_vfsmnt+0x135/0x6e0
[  153.097275]  vfs_create_mount.part.0+0x40/0x440
[  153.097303]  fc_mount_longterm+0x126/0x160
[  153.097330]  mq_init_ns+0x42e/0x630
[  153.097348]  copy_ipcs+0x38d/0x630
[  153.097365]  create_new_namespaces+0x210/0xab0
[  153.097395]  copy_namespaces+0x45c/0x580
[  153.097424]  copy_process+0x2649/0x73c0
[  153.097443]  kernel_clone+0xea/0x7f0
[  153.097461]  __do_sys_clone+0xce/0x120
[  153.097480]  do_syscall_64+0xbf/0x360
[  153.097498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
03:45:09 executing program 5:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00))
r0 = getpid()
pidfd_open(r0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  153.145587] kmemleak: Cannot insert 0x607f1a63e304 into the object search tree (overlaps existing)
[  153.145613] CPU: 1 UID: 0 PID: 3977 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  153.145647] Tainted: [W]=WARN
[  153.145653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.145665] Call Trace:
[  153.145672]  <TASK>
[  153.145680]  dump_stack_lvl+0xca/0x120
[  153.145720]  __link_object+0x190/0x210
[  153.145752]  __create_object+0x48/0x80
[  153.145784]  pcpu_alloc_noprof+0x87a/0x1170
[  153.145827]  __percpu_counter_init_many+0x44/0x360
[  153.145858]  ? __pfx_xfrm6_net_init+0x10/0x10
[  153.145893]  xfrm6_net_init+0x4e/0x1a0
[  153.145927]  ? __pfx_xfrm6_net_init+0x10/0x10
[  153.145959]  ops_init+0x1e1/0x650
[  153.145985]  setup_net+0x10d/0x320
[  153.146003]  ? lockdep_init_map_type+0x4b/0x240
[  153.146030]  ? __pfx_setup_net+0x10/0x10
[  153.146053]  ? debug_mutex_init+0x37/0x70
[  153.146088]  copy_net_ns+0x2e3/0x650
[  153.146113]  create_new_namespaces+0x3f6/0xab0
[  153.146154]  copy_namespaces+0x45c/0x580
[  153.146189]  copy_process+0x2649/0x73c0
[  153.146213]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  153.146248]  ? __pfx_copy_process+0x10/0x10
[  153.146270]  ? __lock_acquire+0xc65/0x1b70
[  153.146299]  ? lock_is_held_type+0x9e/0x120
[  153.146338]  kernel_clone+0xea/0x7f0
[  153.146359]  ? finish_task_switch.isra.0+0x201/0x840
[  153.146395]  ? __pfx_kernel_clone+0x10/0x10
[  153.146420]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  153.146450]  ? finish_task_switch.isra.0+0x206/0x840
[  153.146487]  ? trace_sched_exit_tp+0xbf/0x100
[  153.146519]  ? __schedule+0xe91/0x3590
[  153.146550]  __do_sys_clone+0xce/0x120
[  153.146573]  ? __pfx___do_sys_clone+0x10/0x10
[  153.146596]  ? __pfx___schedule+0x10/0x10
[  153.146638]  ? syscall_user_dispatch+0x78/0x140
[  153.146671]  do_syscall_64+0xbf/0x360
[  153.146712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.146733] RIP: 0033:0x7f7784b58b19
[  153.146750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  153.146770] RSP: 002b:00007f77820ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  153.146791] RAX: ffffffffffffffda RBX: 00007f7784c6bf60 RCX: 00007f7784b58b19
[  153.146805] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 000000004c01f900
[  153.146818] RBP: 00007f7784bb2f6d R08: 0000000000000000 R09: 0000000000000000
[  153.146831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.146844] R13: 00007ffe10f9a8df R14: 00007f77820ce300 R15: 0000000000022000
[  153.146873]  </TASK>
[  153.147189] kmemleak: Kernel memory leak detector disabled
[  153.147196] kmemleak: Object (percpu) 0x607f1a63e300 (size 8):
[  153.147209] kmemleak:   comm "syz-executor.4", pid 3977, jiffies 4294819947
[  153.147222] kmemleak:   min_count = 1
[  153.147229] kmemleak:   count = 0
[  153.147236] kmemleak:   flags = 0x21
[  153.147242] kmemleak:   checksum = 0
[  153.147249] kmemleak:   backtrace:
[  153.147255]  pcpu_alloc_noprof+0x87a/0x1170
[  153.147284]  alloc_vfsmnt+0x135/0x6e0
[  153.147308]  vfs_create_mount.part.0+0x40/0x440
[  153.147337]  fc_mount_longterm+0x126/0x160
[  153.147364]  mq_init_ns+0x42e/0x630
[  153.147382]  copy_ipcs+0x38d/0x630
[  153.147399]  create_new_namespaces+0x210/0xab0
[  153.147429]  copy_namespaces+0x45c/0x580
[  153.147457]  copy_process+0x2649/0x73c0
[  153.147476]  kernel_clone+0xea/0x7f0
[  153.147494]  __do_sys_clone+0xce/0x120
[  153.147513]  do_syscall_64+0xbf/0x360
[  153.147530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.210317] kmemleak: Automatic memory scanning thread ended
03:45:09 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r2, 0x1)
keyctl$invalidate(0x15, r3)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000640)={r3}, &(0x7f0000000680)={'enc=', 'oaep', ' hash=', {'crc32c\x00'}}, 0x0, 0x0)

[  153.329855] Bluetooth: Unexpected continuation frame (len 16)
[  153.377601] Bluetooth: hci6: SCO packet for unknown connection handle 0
[  153.377786] Bluetooth: Unexpected continuation frame (len 20)
[  153.392624] Bluetooth: hci6: link tx timeout
[  153.393556] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.416287] ------------[ cut here ]------------
[  153.417489] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#0: kworker/0:2/101
[  153.419259] Modules linked in:
[  153.420050] CPU: 0 UID: 0 PID: 101 Comm: kworker/0:2 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  153.423537] Tainted: [W]=WARN
[  153.425251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.430110] Workqueue: events free_ipc
[  153.430858] RIP: 0010:mntput_no_expire+0x78e/0xbe0
[  153.431743] Code: 05 d6 30 81 04 01 e8 71 df 91 ff e9 41 fc ff ff e8 27 47 b4 ff 31 ff 44 89 ee e8 4d 42 b4 ff 45 85 ed 79 09 e8 13 47 b4 ff 90 <0f> 0b 90 e8 0a 47 b4 ff e8 b5 2d fc 02 31 ff 89 c5 89 c6 e8 2a 42
[  153.434804] RSP: 0018:ffff88801606fb48 EFLAGS: 00010293
[  153.435743] RAX: 0000000000000000 RBX: 1ffff11002c0df6e RCX: ffffffff81bfaf93
[  153.436967] RDX: ffff88801629b700 RSI: ffffffff81bfaf9d RDI: 0000000000000005
[  153.438197] RBP: ffff88801f1e3c00 R08: 0000000000000001 R09: 0000000000000000
[  153.439434] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88801606fbb0
[  153.440678] R13: 00000000ffffffff R14: 0000000000000001 R15: 0000000000000000
[  153.441921] FS:  0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  153.443254] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.444137] CR2: 00007f778208c718 CR3: 00000000387e0000 CR4: 0000000000350ef0
[  153.445193] Call Trace:
[  153.445611]  <TASK>
[  153.445971]  ? __pfx_mntput_no_expire+0x10/0x10
[  153.446735]  ? lock_is_held_type+0x9e/0x120
[  153.447407]  mntput+0x6b/0x90
[  153.447928]  free_ipc+0x179/0x2b0
[  153.448487]  process_one_work+0x8e1/0x19c0
[  153.449137]  ? __pfx_process_one_work+0x10/0x10
[  153.449874]  ? move_linked_works+0x172/0x270
[  153.450589]  ? assign_work+0x196/0x240
[  153.451199]  worker_thread+0x67e/0xe90
[  153.451817]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  153.452630]  ? __pfx_worker_thread+0x10/0x10
[  153.453293]  kthread+0x3c8/0x740
[  153.453845]  ? __pfx_kthread+0x10/0x10
[  153.454425]  ? ret_from_fork+0x23/0x430
[  153.455144]  ? lock_release+0xc8/0x290
[  153.455862]  ? __pfx_kthread+0x10/0x10
[  153.456569]  ret_from_fork+0x34b/0x430
[  153.457244]  ? __pfx_kthread+0x10/0x10
[  153.457963]  ret_from_fork_asm+0x1a/0x30
[  153.458732]  </TASK>
[  153.459142] irq event stamp: 32409
[  153.459775] hardirqs last  enabled at (32419): [<ffffffff81541b18>] __up_console_sem+0x78/0x80
[  153.461257] hardirqs last disabled at (32428): [<ffffffff81541afd>] __up_console_sem+0x5d/0x80
[  153.462751] softirqs last  enabled at (32230): [<ffffffff813bafcc>] handle_softirqs+0x50c/0x770
[  153.464244] softirqs last disabled at (32225): [<ffffffff813bb364>] __irq_exit_rcu+0xc4/0x100
[  153.465735] ---[ end trace 0000000000000000 ]---
[  153.876181] audit: type=1326 audit(1756784710.623:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3984 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6a4c7b19 code=0x0
SYZFAIL: failed to write(kmemleak, "scan")
 (errno 1: Operation not permitted)
BUG: leak checking failed
[  155.030524] Bluetooth: hci6: command 0x0406 tx timeout
[  157.335235] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  157.336813] Bluetooth: hci1: Injecting HCI hardware error event
[  157.341318] Bluetooth: hci1: hardware error 0x00
[  159.382540] Bluetooth: hci1: Opcode 0x0c03 failed: -110

VM DIAGNOSIS:
03:45:10  Registers:
info registers vcpu 0
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88801606f4b8
R8 =0000000000000000 R9 =ffffed1001759046 R10=0000000000000061 R11=0000000000000001
R12=0000000000000061 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f778208c718 CR3=00000000387e0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000100 RCX=ffffffff81b98698 RDX=ffff888015a20000
RSI=ffffffff81b98663 RDI=0000000000000001 RBP=ffff88801769fa98 RSP=ffff88801769fa08
R8 =0000000000000001 R9 =ffffffff81b97d93 R10=0000000000000001 R11=0000000000000001
R12=ffff88801769fc74 R13=0000000000000871 R14=ffff88801769fc38 R15=0000000000000001
RIP=ffffffff81b98665 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f29010d98c0 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557244745a18 CR3=000000000d7b1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000