Warning: Permanently added '[localhost]:40614' (ECDSA) to the list of known hosts. 2025/09/01 14:51:52 fuzzer started 2025/09/01 14:51:52 dialing manager at localhost:35473 syzkaller login: [ 58.716751] cgroup: Unknown subsys name 'net' [ 58.805864] cgroup: Unknown subsys name 'cpuset' [ 58.832424] cgroup: Unknown subsys name 'rlimit' 2025/09/01 14:52:03 syscalls: 2214 2025/09/01 14:52:03 code coverage: enabled 2025/09/01 14:52:03 comparison tracing: enabled 2025/09/01 14:52:03 extra coverage: enabled 2025/09/01 14:52:03 setuid sandbox: enabled 2025/09/01 14:52:03 namespace sandbox: enabled 2025/09/01 14:52:03 Android sandbox: enabled 2025/09/01 14:52:03 fault injection: enabled 2025/09/01 14:52:03 leak checking: enabled 2025/09/01 14:52:03 net packet injection: enabled 2025/09/01 14:52:03 net device setup: enabled 2025/09/01 14:52:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 14:52:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 14:52:03 USB emulation: enabled 2025/09/01 14:52:03 hci packet injection: enabled 2025/09/01 14:52:03 wifi device emulation: enabled 2025/09/01 14:52:03 802.15.4 emulation: enabled 2025/09/01 14:52:04 fetching corpus: 50, signal 20415/22205 (executing program) 2025/09/01 14:52:04 fetching corpus: 100, signal 26547/30020 (executing program) 2025/09/01 14:52:04 fetching corpus: 150, signal 34689/39629 (executing program) 2025/09/01 14:52:04 fetching corpus: 200, signal 40162/46518 (executing program) 2025/09/01 14:52:04 fetching corpus: 250, signal 45547/53231 (executing program) 2025/09/01 14:52:04 fetching corpus: 300, signal 51422/60262 (executing program) 2025/09/01 14:52:04 fetching corpus: 350, signal 56469/66469 (executing program) 2025/09/01 14:52:04 fetching corpus: 400, signal 61073/72170 (executing program) 2025/09/01 14:52:04 fetching corpus: 450, signal 65340/77459 (executing program) 2025/09/01 14:52:04 fetching corpus: 500, signal 69710/82683 (executing program) 2025/09/01 14:52:04 fetching corpus: 550, signal 73404/87304 (executing program) 2025/09/01 14:52:04 fetching corpus: 600, signal 74969/89969 (executing program) 2025/09/01 14:52:04 fetching corpus: 650, signal 77592/93529 (executing program) 2025/09/01 14:52:05 fetching corpus: 700, signal 80356/97159 (executing program) 2025/09/01 14:52:05 fetching corpus: 750, signal 83366/100870 (executing program) 2025/09/01 14:52:05 fetching corpus: 800, signal 86710/104868 (executing program) 2025/09/01 14:52:05 fetching corpus: 850, signal 88869/107787 (executing program) 2025/09/01 14:52:05 fetching corpus: 900, signal 90469/110199 (executing program) 2025/09/01 14:52:05 fetching corpus: 950, signal 92221/112736 (executing program) 2025/09/01 14:52:05 fetching corpus: 1000, signal 93465/114775 (executing program) 2025/09/01 14:52:05 fetching corpus: 1050, signal 97742/119204 (executing program) 2025/09/01 14:52:05 fetching corpus: 1100, signal 99108/121293 (executing program) 2025/09/01 14:52:05 fetching corpus: 1150, signal 100483/123361 (executing program) 2025/09/01 14:52:06 fetching corpus: 1200, signal 102495/125890 (executing program) 2025/09/01 14:52:06 fetching corpus: 1250, signal 103774/127806 (executing program) 2025/09/01 14:52:06 fetching corpus: 1300, signal 105594/130127 (executing program) 2025/09/01 14:52:06 fetching corpus: 1350, signal 106349/131624 (executing program) 2025/09/01 14:52:06 fetching corpus: 1400, signal 108046/133771 (executing program) 2025/09/01 14:52:06 fetching corpus: 1450, signal 109467/135704 (executing program) 2025/09/01 14:52:06 fetching corpus: 1500, signal 110814/137497 (executing program) 2025/09/01 14:52:06 fetching corpus: 1550, signal 112503/139557 (executing program) 2025/09/01 14:52:06 fetching corpus: 1600, signal 113620/141193 (executing program) 2025/09/01 14:52:06 fetching corpus: 1650, signal 114979/143004 (executing program) 2025/09/01 14:52:06 fetching corpus: 1700, signal 115985/144464 (executing program) 2025/09/01 14:52:06 fetching corpus: 1750, signal 117068/146076 (executing program) 2025/09/01 14:52:07 fetching corpus: 1800, signal 118454/147773 (executing program) 2025/09/01 14:52:07 fetching corpus: 1850, signal 119297/149135 (executing program) 2025/09/01 14:52:07 fetching corpus: 1900, signal 120348/150573 (executing program) 2025/09/01 14:52:07 fetching corpus: 1950, signal 121349/152012 (executing program) 2025/09/01 14:52:07 fetching corpus: 2000, signal 122606/153536 (executing program) 2025/09/01 14:52:07 fetching corpus: 2050, signal 123689/154940 (executing program) 2025/09/01 14:52:07 fetching corpus: 2100, signal 125142/156577 (executing program) 2025/09/01 14:52:07 fetching corpus: 2150, signal 126245/157953 (executing program) 2025/09/01 14:52:07 fetching corpus: 2200, signal 127338/159335 (executing program) 2025/09/01 14:52:07 fetching corpus: 2250, signal 128078/160525 (executing program) 2025/09/01 14:52:07 fetching corpus: 2300, signal 128931/161688 (executing program) 2025/09/01 14:52:08 fetching corpus: 2350, signal 130223/163068 (executing program) 2025/09/01 14:52:08 fetching corpus: 2400, signal 130914/164138 (executing program) 2025/09/01 14:52:08 fetching corpus: 2450, signal 131677/165277 (executing program) 2025/09/01 14:52:08 fetching corpus: 2500, signal 132509/166389 (executing program) 2025/09/01 14:52:08 fetching corpus: 2550, signal 133100/167322 (executing program) 2025/09/01 14:52:08 fetching corpus: 2600, signal 134024/168430 (executing program) 2025/09/01 14:52:08 fetching corpus: 2650, signal 134762/169454 (executing program) 2025/09/01 14:52:08 fetching corpus: 2700, signal 135358/170384 (executing program) 2025/09/01 14:52:08 fetching corpus: 2750, signal 136134/171382 (executing program) 2025/09/01 14:52:08 fetching corpus: 2800, signal 136792/172271 (executing program) 2025/09/01 14:52:08 fetching corpus: 2850, signal 137421/173191 (executing program) 2025/09/01 14:52:09 fetching corpus: 2900, signal 138220/174162 (executing program) 2025/09/01 14:52:09 fetching corpus: 2950, signal 138732/174991 (executing program) 2025/09/01 14:52:09 fetching corpus: 3000, signal 139366/175891 (executing program) 2025/09/01 14:52:09 fetching corpus: 3050, signal 140184/176825 (executing program) 2025/09/01 14:52:09 fetching corpus: 3100, signal 140906/177709 (executing program) 2025/09/01 14:52:09 fetching corpus: 3150, signal 141755/178623 (executing program) 2025/09/01 14:52:09 fetching corpus: 3200, signal 142564/179527 (executing program) 2025/09/01 14:52:09 fetching corpus: 3250, signal 143099/180285 (executing program) 2025/09/01 14:52:09 fetching corpus: 3300, signal 144012/181198 (executing program) 2025/09/01 14:52:09 fetching corpus: 3350, signal 144780/182031 (executing program) 2025/09/01 14:52:09 fetching corpus: 3400, signal 145424/182792 (executing program) 2025/09/01 14:52:10 fetching corpus: 3450, signal 146142/183582 (executing program) 2025/09/01 14:52:10 fetching corpus: 3500, signal 146732/184285 (executing program) 2025/09/01 14:52:10 fetching corpus: 3550, signal 147214/184946 (executing program) 2025/09/01 14:52:10 fetching corpus: 3600, signal 148164/185740 (executing program) 2025/09/01 14:52:10 fetching corpus: 3650, signal 148641/186403 (executing program) 2025/09/01 14:52:10 fetching corpus: 3700, signal 149090/187049 (executing program) 2025/09/01 14:52:10 fetching corpus: 3750, signal 149918/187790 (executing program) 2025/09/01 14:52:10 fetching corpus: 3800, signal 150374/188447 (executing program) 2025/09/01 14:52:10 fetching corpus: 3850, signal 150996/189086 (executing program) 2025/09/01 14:52:10 fetching corpus: 3900, signal 151478/189720 (executing program) 2025/09/01 14:52:10 fetching corpus: 3950, signal 151813/190308 (executing program) 2025/09/01 14:52:10 fetching corpus: 4000, signal 152367/190921 (executing program) 2025/09/01 14:52:11 fetching corpus: 4050, signal 152685/191481 (executing program) 2025/09/01 14:52:11 fetching corpus: 4100, signal 152991/192027 (executing program) 2025/09/01 14:52:11 fetching corpus: 4150, signal 153430/192574 (executing program) 2025/09/01 14:52:11 fetching corpus: 4200, signal 153822/193104 (executing program) 2025/09/01 14:52:11 fetching corpus: 4250, signal 154333/193642 (executing program) 2025/09/01 14:52:11 fetching corpus: 4300, signal 154841/194185 (executing program) 2025/09/01 14:52:11 fetching corpus: 4350, signal 155433/194719 (executing program) 2025/09/01 14:52:11 fetching corpus: 4400, signal 155974/195251 (executing program) 2025/09/01 14:52:11 fetching corpus: 4450, signal 156441/195736 (executing program) 2025/09/01 14:52:11 fetching corpus: 4500, signal 157030/196234 (executing program) 2025/09/01 14:52:11 fetching corpus: 4550, signal 157532/196713 (executing program) 2025/09/01 14:52:12 fetching corpus: 4600, signal 157912/197181 (executing program) 2025/09/01 14:52:12 fetching corpus: 4650, signal 158192/197652 (executing program) 2025/09/01 14:52:12 fetching corpus: 4700, signal 158954/198099 (executing program) 2025/09/01 14:52:12 fetching corpus: 4750, signal 159292/198538 (executing program) 2025/09/01 14:52:12 fetching corpus: 4800, signal 159694/198964 (executing program) 2025/09/01 14:52:12 fetching corpus: 4850, signal 160142/199396 (executing program) 2025/09/01 14:52:12 fetching corpus: 4900, signal 160502/199776 (executing program) 2025/09/01 14:52:12 fetching corpus: 4950, signal 160901/200160 (executing program) 2025/09/01 14:52:12 fetching corpus: 5000, signal 161360/200168 (executing program) 2025/09/01 14:52:12 fetching corpus: 5050, signal 161799/200182 (executing program) 2025/09/01 14:52:13 fetching corpus: 5100, signal 162103/200213 (executing program) 2025/09/01 14:52:13 fetching corpus: 5150, signal 162719/200258 (executing program) 2025/09/01 14:52:13 fetching corpus: 5200, signal 163058/200268 (executing program) 2025/09/01 14:52:13 fetching corpus: 5250, signal 163720/200275 (executing program) 2025/09/01 14:52:13 fetching corpus: 5300, signal 164082/200284 (executing program) 2025/09/01 14:52:13 fetching corpus: 5350, signal 164694/200305 (executing program) 2025/09/01 14:52:13 fetching corpus: 5400, signal 165189/200328 (executing program) 2025/09/01 14:52:13 fetching corpus: 5450, signal 165621/200332 (executing program) 2025/09/01 14:52:13 fetching corpus: 5500, signal 165869/200338 (executing program) 2025/09/01 14:52:13 fetching corpus: 5550, signal 166146/200339 (executing program) 2025/09/01 14:52:13 fetching corpus: 5600, signal 166499/200420 (executing program) 2025/09/01 14:52:13 fetching corpus: 5650, signal 167136/200427 (executing program) 2025/09/01 14:52:13 fetching corpus: 5700, signal 167512/200434 (executing program) 2025/09/01 14:52:14 fetching corpus: 5750, signal 167998/200449 (executing program) 2025/09/01 14:52:14 fetching corpus: 5800, signal 168412/200450 (executing program) 2025/09/01 14:52:14 fetching corpus: 5850, signal 168746/200459 (executing program) 2025/09/01 14:52:14 fetching corpus: 5900, signal 169105/200475 (executing program) 2025/09/01 14:52:14 fetching corpus: 5950, signal 169378/200486 (executing program) 2025/09/01 14:52:14 fetching corpus: 6000, signal 169733/200496 (executing program) 2025/09/01 14:52:14 fetching corpus: 6050, signal 170186/200496 (executing program) 2025/09/01 14:52:14 fetching corpus: 6100, signal 170472/200500 (executing program) 2025/09/01 14:52:14 fetching corpus: 6150, signal 170722/200512 (executing program) 2025/09/01 14:52:14 fetching corpus: 6200, signal 171005/200518 (executing program) 2025/09/01 14:52:14 fetching corpus: 6250, signal 171220/200534 (executing program) 2025/09/01 14:52:14 fetching corpus: 6300, signal 171632/200534 (executing program) 2025/09/01 14:52:14 fetching corpus: 6350, signal 171981/200540 (executing program) 2025/09/01 14:52:14 fetching corpus: 6400, signal 172293/200546 (executing program) 2025/09/01 14:52:14 fetching corpus: 6450, signal 172649/200557 (executing program) 2025/09/01 14:52:15 fetching corpus: 6500, signal 172980/200605 (executing program) 2025/09/01 14:52:15 fetching corpus: 6550, signal 173312/200607 (executing program) 2025/09/01 14:52:15 fetching corpus: 6600, signal 173687/200609 (executing program) 2025/09/01 14:52:15 fetching corpus: 6650, signal 174022/200619 (executing program) 2025/09/01 14:52:15 fetching corpus: 6700, signal 174371/200622 (executing program) 2025/09/01 14:52:15 fetching corpus: 6750, signal 174597/200622 (executing program) 2025/09/01 14:52:15 fetching corpus: 6800, signal 175082/200687 (executing program) 2025/09/01 14:52:15 fetching corpus: 6850, signal 175480/200690 (executing program) 2025/09/01 14:52:15 fetching corpus: 6900, signal 175772/200701 (executing program) 2025/09/01 14:52:15 fetching corpus: 6950, signal 176132/200701 (executing program) 2025/09/01 14:52:15 fetching corpus: 7000, signal 176356/200709 (executing program) 2025/09/01 14:52:15 fetching corpus: 7050, signal 176604/200720 (executing program) 2025/09/01 14:52:15 fetching corpus: 7100, signal 176904/200720 (executing program) 2025/09/01 14:52:15 fetching corpus: 7150, signal 177185/200732 (executing program) 2025/09/01 14:52:16 fetching corpus: 7200, signal 177448/200738 (executing program) 2025/09/01 14:52:16 fetching corpus: 7250, signal 178072/200742 (executing program) 2025/09/01 14:52:16 fetching corpus: 7300, signal 178396/200768 (executing program) 2025/09/01 14:52:16 fetching corpus: 7350, signal 178683/200770 (executing program) 2025/09/01 14:52:16 fetching corpus: 7400, signal 178960/200780 (executing program) 2025/09/01 14:52:16 fetching corpus: 7450, signal 179177/200792 (executing program) 2025/09/01 14:52:16 fetching corpus: 7500, signal 179433/200795 (executing program) 2025/09/01 14:52:16 fetching corpus: 7550, signal 179680/200805 (executing program) 2025/09/01 14:52:16 fetching corpus: 7600, signal 180012/200862 (executing program) 2025/09/01 14:52:16 fetching corpus: 7650, signal 180330/200862 (executing program) 2025/09/01 14:52:16 fetching corpus: 7700, signal 180656/200862 (executing program) 2025/09/01 14:52:16 fetching corpus: 7750, signal 181014/200867 (executing program) 2025/09/01 14:52:17 fetching corpus: 7800, signal 181341/200872 (executing program) 2025/09/01 14:52:17 fetching corpus: 7850, signal 181559/200874 (executing program) 2025/09/01 14:52:17 fetching corpus: 7900, signal 181902/200886 (executing program) 2025/09/01 14:52:17 fetching corpus: 7950, signal 182250/200891 (executing program) 2025/09/01 14:52:17 fetching corpus: 8000, signal 182658/200893 (executing program) 2025/09/01 14:52:17 fetching corpus: 8050, signal 183502/200893 (executing program) 2025/09/01 14:52:17 fetching corpus: 8100, signal 183841/200893 (executing program) 2025/09/01 14:52:17 fetching corpus: 8150, signal 184169/200894 (executing program) 2025/09/01 14:52:17 fetching corpus: 8200, signal 184462/200911 (executing program) 2025/09/01 14:52:17 fetching corpus: 8250, signal 184809/200916 (executing program) 2025/09/01 14:52:18 fetching corpus: 8300, signal 186299/200936 (executing program) 2025/09/01 14:52:18 fetching corpus: 8350, signal 186601/200937 (executing program) 2025/09/01 14:52:18 fetching corpus: 8400, signal 186818/200979 (executing program) 2025/09/01 14:52:18 fetching corpus: 8450, signal 187066/200982 (executing program) 2025/09/01 14:52:18 fetching corpus: 8500, signal 187567/200982 (executing program) 2025/09/01 14:52:18 fetching corpus: 8550, signal 187823/200984 (executing program) 2025/09/01 14:52:18 fetching corpus: 8600, signal 188139/200984 (executing program) 2025/09/01 14:52:18 fetching corpus: 8650, signal 188351/201008 (executing program) 2025/09/01 14:52:18 fetching corpus: 8700, signal 188777/201010 (executing program) 2025/09/01 14:52:18 fetching corpus: 8750, signal 189095/201012 (executing program) 2025/09/01 14:52:18 fetching corpus: 8800, signal 189521/201105 (executing program) 2025/09/01 14:52:18 fetching corpus: 8850, signal 189739/201115 (executing program) 2025/09/01 14:52:19 fetching corpus: 8900, signal 190038/201118 (executing program) 2025/09/01 14:52:19 fetching corpus: 8950, signal 190341/201119 (executing program) 2025/09/01 14:52:19 fetching corpus: 9000, signal 190610/201119 (executing program) 2025/09/01 14:52:19 fetching corpus: 9050, signal 190864/201136 (executing program) 2025/09/01 14:52:19 fetching corpus: 9100, signal 191198/201144 (executing program) 2025/09/01 14:52:19 fetching corpus: 9150, signal 191626/201148 (executing program) 2025/09/01 14:52:19 fetching corpus: 9200, signal 191989/201157 (executing program) 2025/09/01 14:52:19 fetching corpus: 9250, signal 192238/201160 (executing program) 2025/09/01 14:52:20 fetching corpus: 9300, signal 192467/201188 (executing program) 2025/09/01 14:52:20 fetching corpus: 9350, signal 192812/201188 (executing program) 2025/09/01 14:52:20 fetching corpus: 9400, signal 192983/201191 (executing program) 2025/09/01 14:52:20 fetching corpus: 9450, signal 193265/201192 (executing program) 2025/09/01 14:52:20 fetching corpus: 9500, signal 193564/201192 (executing program) 2025/09/01 14:52:20 fetching corpus: 9550, signal 193703/201193 (executing program) 2025/09/01 14:52:20 fetching corpus: 9600, signal 193863/201211 (executing program) 2025/09/01 14:52:20 fetching corpus: 9650, signal 194185/201212 (executing program) 2025/09/01 14:52:21 fetching corpus: 9700, signal 194429/201234 (executing program) 2025/09/01 14:52:21 fetching corpus: 9750, signal 194655/201245 (executing program) 2025/09/01 14:52:21 fetching corpus: 9800, signal 194809/201247 (executing program) 2025/09/01 14:52:21 fetching corpus: 9850, signal 195181/201248 (executing program) 2025/09/01 14:52:21 fetching corpus: 9900, signal 195361/201255 (executing program) 2025/09/01 14:52:21 fetching corpus: 9950, signal 195586/201289 (executing program) 2025/09/01 14:52:21 fetching corpus: 9969, signal 195649/201289 (executing program) 2025/09/01 14:52:21 fetching corpus: 9969, signal 195649/201289 (executing program) 2025/09/01 14:52:23 starting 8 fuzzer processes 14:52:23 executing program 0: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x24000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @local, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17cc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40840}, 0x24040080) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10008000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9b}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8a}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8084) r0 = syz_open_dev$vcsa(&(0x7f0000000540), 0x3c0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x37}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040044) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x178, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x32c8e6ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4d7e8015}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x509}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r3 = syz_open_dev$vcsa(&(0x7f0000000940), 0x80000001, 0x100) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) ioctl$KDSKBLED(r0, 0x4b65, 0x6b39) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x401000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x70}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000b00)={[0x7fffffff]}, 0x8, 0x80000) read$char_usb(r6, &(0x7f0000000b40)=""/248, 0xf8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x94, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8ec0046d70c8b65046f6a8bd1a5d1e7bfd1b9f49034f881"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf5ec554bd22d6cccb822a7ac3430e629663c5d9451c7b7"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 14:52:23 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xdd, 0x7fffffff, 0xa8d, 0x3, 0x1f}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x10000001}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x40, 0x6, 0x67, 0x0, 0x10001, 0x148, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x7fff, 0x6, 0x9, 0x28, 0x4, 0x4, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r0, 0xe) r1 = syz_io_uring_complete(0x0) pread64(r1, &(0x7f0000000140)=""/161, 0xa1, 0x7fff) r2 = accept$unix(r0, &(0x7f0000000200), &(0x7f0000000280)=0x6e) ioctl$FICLONE(r0, 0x40049409, r2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x75}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x484c01, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000340)={0x6, 0x9}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x640440, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000003c0)={@private2, 0x60}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@remote, 0x4e21, 0x0, 0x4e22, 0x9, 0xa, 0x20, 0x20, 0x11, r5, r6}, {0xfff, 0x2000000020, 0x9, 0x3, 0xd30, 0x198, 0x3, 0x7}, {0x0, 0x7a80, 0x0, 0x3}, 0xffffffff, 0x6e6bb6, 0x1, 0x1}, {{@in=@local, 0x4d6, 0xff}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x2, 0x80, 0x0, 0x1, 0x2}}, 0xe8) r7 = openat(r4, &(0x7f0000000700)='./file0\x00', 0x200, 0x2) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000880)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000980)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001e80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001500)={0x928, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe1f3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5c}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r5}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x278, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff31db}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x79}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x3f, 0x52, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xd91, 0x40, 0x5, 0x400}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x48c}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x90}}}]}}]}, 0x928}, 0x1, 0x0, 0x0, 0xd0}, 0x48445) 14:52:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x24040800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}]}, 0x5c}}, 0x40000d0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20004c81) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xfe}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x27}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x81}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20044884) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x791b9f4198d4ebc8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040014}, 0x4040) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x48010) 14:52:24 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4004810) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0b}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x613}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfaad}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x43}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x482}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x480d4}, 0x4000800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xcf}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044054}, 0x20000400) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x14080, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) r4 = memfd_secret(0x80000) fcntl$getownex(r3, 0x10, &(0x7f0000000680)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x50}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004851}, 0x4000080) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000780)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = epoll_create1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000940)={{r8}, 0x0, 0x2, @inherit={0x50, &(0x7f00000008c0)={0x0, 0x1, 0x269c, 0x74a76730, {0x0, 0x5, 0x7fff, 0x42, 0x5}, [0xe6]}}, @devid}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x2f, 0x6, 0x2, 0xef, 0xc, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x10, 0x101, 0xc60d}}) setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000001a00)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r10}, 0xc) [ 89.736662] audit: type=1400 audit(1756738344.031:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:52:24 executing program 7: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='*{/\\-\x00', &(0x7f0000000040)='%\x00', 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsmount(r0, 0x0, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x1) write$P9_RWRITE(r1, &(0x7f00000001c0)={0xb, 0x77, 0x1, 0x8}, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x4, 0x0, 0x4, 0x4bb}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r5 = open_tree(r0, &(0x7f00000003c0)='./file0\x00', 0x8000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x4}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xc, 0x0, @random="0528658239a78c3f"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="e07d816cd5ea"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="9b1d3c9c4b64"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) fsmount(r0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x66a, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40054}, 0x2000c090) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6b}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x10000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xce32}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040810}, 0x20) r8 = memfd_secret(0x80000) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x9c, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24044010}, 0xf2dd75c7a14d8a4d) write$P9_RLERROR(r5, &(0x7f00000009c0)={0xe, 0x7, 0x1, {0x5, 'TIPC\x00'}}, 0xe) 14:52:24 executing program 4: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "50da4f277043e174b175f812fd"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "246186426ee28b49eba7"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "fd1e1abd2d69921a26d7155468797e"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd27, 0x9, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4c004) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69a8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000814) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10010204}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a72b261774edab991ef92f0d9652d997"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b5c1c31d202f42b74a55d82580207756"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "0ab512d283e69f0b43bd15e13a68d54f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c0f757455bd3c238bea1bc624c8dae27"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9bdde58110bc4acd8cae41937d8be945"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20880}, 0xc000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000640)={0x58c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x12, 0x18, 0x6, 0xf, 0x3, 0xe6, 0x3, 0x9, 0x48, 0x18]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x600, 0x4, 0x7fff, 0x6, 0x0, 0x1, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x36, 0xb, 0xc, 0x3, 0x30, 0x5, 0x16, 0x4, 0xb, 0x60, 0x1, 0x0, 0xc, 0x48, 0x4, 0x5, 0x1b, 0x3, 0x1b, 0x1d, 0x12, 0x36, 0x1b, 0x30, 0x6c, 0x32, 0xc, 0x5, 0x60, 0x12, 0x4]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0xa}, {0x3, 0x3}, {}, {0x7, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x4}, {0x1, 0x9}, {0x7, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x7}, {0x1, 0x1}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xbfbcea942389a277, 0x0, 0x1, 0x1b, 0x6c, 0x6, 0x4c, 0xb, 0x3, 0x6, 0x6a, 0x60, 0x4, 0xb, 0x30, 0x5, 0x12, 0x18, 0x48, 0x12, 0x30]}]}, @NL80211_BAND_5GHZ={0x124, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x12, 0x3, 0x5, 0xc, 0x45, 0x6c, 0x48, 0x9, 0x9, 0x3, 0x36, 0x36]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x9}, {0x4, 0x1}, {0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x6}, {0x3}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x7}, {0x7}, {0x7, 0x8}, {0x0, 0x4}, {0x4}, {0x7, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x3, 0x3}, {}, {0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x4, 0x5}, {0x5}, {0x5, 0x5}, {0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x1}, {0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x64, 0xa9, 0x9, 0x101, 0x5, 0x3, 0x1c47]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x4}, {0x6, 0x3}, {0x6, 0x1}, {0x5}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x6}, {0x1, 0x7}, {}, {0x7, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x6}, {0x5}, {0x4, 0x3}, {0x1, 0x9}, {0x5, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x9}, {0x4, 0x9}, {}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x9}, {0x6}, {0x2, 0x4}, {0x7, 0x2}, {0x3, 0x8}, {0x3, 0x4}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x7, 0x5}, {0x2}, {0x4, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x8}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x7}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x8}, {0x5, 0x17}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x2}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x6}, {0x7, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x4}, {0x7}, {0x2, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x16, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x88, 0x2, 0xfff, 0xdce, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0xc, 0x12, 0x5, 0x6, 0x79, 0xc, 0x1b, 0x36, 0xc, 0xc, 0x48, 0xb, 0x18, 0xc, 0xc, 0x0, 0x48, 0xb, 0x16, 0x2, 0xb, 0xb, 0x30, 0x36, 0x48, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x3, 0x7fff, 0x200, 0x5, 0xd5, 0x101]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x11, 0x6, 0x1, 0x2, 0x6, 0x18, 0x78ebf85e6e0c3632, 0x1b, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfc, 0x8, 0x81, 0x7, 0x3, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x2}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x4, 0x4}, {0x5, 0x5}, {0x7, 0x3}, {0x2, 0x6}, {0x7, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x0, 0xa}, {0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x3, 0x8}, {0x6}, {0x2, 0x6}, {0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x4, 0x18, 0xb, 0x5, 0x5, 0x0, 0x16, 0x1, 0x16, 0xb, 0x3, 0x2, 0x3, 0x1, 0x16, 0x30, 0x12, 0x60, 0x5, 0x3, 0x24, 0x0, 0x24, 0x2, 0x3, 0x4, 0x5, 0x1b, 0x7a, 0x2]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x2, 0x9, 0xb, 0xb, 0x60]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x4}, {0x3}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x5}, {0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x4}, {}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x1}, {}, {0x3, 0x6}, {0x5, 0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x7}, {0x1, 0x2}, {0x2, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x3}, {0x5, 0x8}, {0x1, 0x3}, {0x6, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0x8}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x3}, {0x3, 0x7}, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0x9}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x2, 0x5}, {0x4, 0x1}, {0x3}, {0x1, 0x3}, {0x2, 0x6}, {0x6, 0xa}, {0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x5}, {0x4, 0x6}, {0x1}, {0x7, 0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0xa}, {0x5, 0x3}, {0x7, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x2, 0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x9, 0x2, 0x24, 0x9, 0x1b, 0x5, 0x6c, 0x16, 0x30, 0x36, 0x18, 0x4, 0x4e532956d6c6b986, 0x6, 0x4, 0x6c, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x6c, 0x2, 0x12, 0x6c, 0x36, 0x18, 0x24, 0x1, 0x2, 0x9, 0x12, 0x2, 0x36, 0x0, 0x3, 0x1, 0xc, 0x0, 0x60]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x7}, {0x6, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x1}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x2}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x6}, {0x7, 0xa}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x5, 0x5c, 0x5, 0x5, 0xda3de6ac70810ff6, 0x24, 0xc, 0x18, 0x69, 0x16, 0x3, 0x4, 0x1, 0x2a, 0x3, 0xb, 0xc, 0x48, 0x16, 0x5, 0x3, 0x18, 0x48, 0x12, 0x5, 0x6, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x401, 0xffff, 0x1, 0xfff, 0x3, 0x8, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x4, 0x48, 0xc, 0x60, 0x30, 0x24, 0x1, 0x1b, 0x18, 0x60, 0x2, 0x1, 0x9, 0x1, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x7, 0x5}, {0x4, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0xb, 0x24, 0x24, 0x3, 0x77, 0x1, 0x6, 0x4, 0x9, 0x1, 0x60, 0x4, 0x3, 0x1b, 0x6, 0x2, 0x36, 0x16, 0x4, 0x9, 0x12, 0x60, 0xc, 0x36, 0x1, 0x30, 0x6c, 0x5e]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x9}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x3}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x8}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x5}, {0x1, 0x7}, {0x2, 0x7}, {0x3, 0x3}, {0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x6c, 0x30, 0x18, 0x5e, 0x4, 0x36, 0x12, 0xb, 0x1, 0x5, 0x48, 0x6c, 0x2, 0xc, 0x24, 0x16, 0xc, 0xb, 0x24, 0x9, 0x28, 0x1, 0x3, 0x4, 0x2, 0x4, 0x48]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3, 0x8000, 0x2, 0x401, 0x7, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x39d, 0xfffb, 0x200, 0x0, 0x9, 0x1f, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1, 0x81, 0xe34b, 0x8, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x48, 0x1, 0xb, 0x59b723d46f98489f, 0x2, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6c, 0x48, 0x1b, 0x16, 0x12, 0x4, 0x5c, 0x48, 0x9, 0x6, 0x6, 0x12, 0xc, 0x36, 0x9, 0x6, 0x48, 0x36, 0x18, 0x9, 0x0, 0x3, 0x12, 0xb, 0x18, 0x18, 0x3, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffe0, 0x4, 0x7, 0x3, 0x5, 0x2, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x4, 0x5}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x7}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x1, 0x1]}]}]}]}, 0x58c}, 0x1, 0x0, 0x0, 0xf72d8099bdbea5f7}, 0x6080) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x29, 0x9a, 0xff, 0x1, 0x20, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x7fffffff, 0x7f}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb0, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x20, 0x1, 0xe5d1, 0x1000, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x68, 0x0, 0x81, 0x4, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x2c, 0x8c, 0x1, 0x0, [{@local, 0x657e}, {@multicast2, 0x1000}, {@local, 0x583}, {@empty, 0x1f}, {@loopback, 0x9}]}, @ssrr={0x89, 0x7, 0xfa, [@private=0xa010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl2\x00', r3, 0x29, 0x3f, 0x1, 0x5, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x710, 0x1, 0x800, 0x81}}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0xddf}, @broadcast, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x4}, {0x7, 0x9}, "6bd1963ea8335375"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'ip6_vti0\x00', r4, 0x2f, 0x9, 0x20, 0x1, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x0, 0x4ee}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000015c0)={'syztnl2\x00', &(0x7f0000001480)={'gretap0\x00', r5, 0x7, 0x8, 0xfb7, 0x9, {{0x41, 0x4, 0x0, 0x0, 0x104, 0x67, 0x0, 0xfd, 0x2f, 0x0, @loopback, @remote, {[@ssrr={0x89, 0xf, 0x20, [@multicast1, @loopback, @broadcast]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x3, [{@multicast1, 0x4e}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x54, 0x53, 0x3, 0x3, [{@multicast2, 0xf7}, {@remote, 0x9}, {@multicast2, 0x25}, {@multicast1, 0xf8c2}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffeee}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0xd}, {@remote, 0x80000001}, {@loopback, 0x9}, {@empty, 0x9}]}, @ssrr={0x89, 0x1b, 0xdf, [@remote, @private=0xa010101, @multicast1, @private=0xa010101, @private=0xa010102, @local]}, @generic={0x7, 0x2}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x7, 0xf, "0bca00365cbd6591cc59fd3339"}, {0x5, 0xe, "e97b5090dea500688c759875"}, {0x7, 0x7, "1ec465575b"}, {0x1, 0x12, "905649c0fb54155f46d7420e47c4e48b"}, {0x0, 0x10, "816c0b9c5c1b6d4a074db92b5a70"}]}, @ssrr={0x89, 0xb, 0xfc, [@remote, @private=0xdc7]}]}}}}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001600), 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0xc}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x22000000}, 0x24008084) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001740)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x11}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}]}]}, 0x80}}, 0xc8) 14:52:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x0, 0x8, 0x7}}, 0x1e) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000000c0)={0x0, 0x6, 0x1, [0x20, 0x9, 0x3f, 0x20, 0x7], [0x40, 0xffffffff00000000, 0x87c, 0x6, 0xff, 0x9, 0x1ff, 0x8, 0x8, 0x8, 0x5, 0x4f4a, 0x0, 0xfff, 0x6, 0x0, 0x538, 0x4, 0xe863, 0x80000000, 0x2, 0x6, 0xffffffffffffffc0, 0x6, 0x4d6, 0xeb, 0x2, 0x3, 0x4, 0x25, 0x98, 0x8, 0x2, 0x9, 0x7, 0x8001, 0x7, 0x280000000000000, 0x40, 0x7fff, 0x7, 0x5, 0xc000, 0x1f, 0x7, 0x1ee, 0x3, 0x8, 0x100000000, 0x7, 0x4, 0x0, 0x7700000000000000, 0x9, 0x6, 0x3, 0x1, 0x4, 0x3, 0x9, 0x4, 0x2, 0x401, 0xffff, 0x8658, 0x2d, 0x3ff, 0x200, 0x4, 0x0, 0xc000000000000, 0x0, 0x5, 0x81ad, 0x9, 0x5, 0x65f34b83, 0x6, 0x7f, 0xfb1b, 0x6, 0x4, 0x1, 0x8000, 0xfffffffffffffe01, 0x8ec5, 0x9, 0x7fffffff, 0x8, 0x10001, 0x401, 0x4, 0x1, 0x39, 0x8, 0x20, 0x7, 0x1800000000, 0x8, 0x3f, 0xfff, 0x6724, 0x5e0, 0x4000000000, 0x4, 0x5, 0xffff, 0x470b40fd, 0x100, 0x7, 0x100000000, 0x0, 0xabeb2da, 0x2, 0xd38, 0x40, 0x0, 0xfffffffffffffbd9, 0x2, 0x5, 0x5]}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000500)=0x1) r3 = fsmount(r0, 0x1, 0x80) r4 = accept$unix(r3, 0x0, &(0x7f0000000540)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000580)={0x20000018}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000005c0)) readv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/39, 0x27}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000a40)=""/39, 0x27}], 0x6) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000b00)={r2, 0x1788, 0x7}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000f00)={r5, "53680258aa99ae75524d6f594e18fc79"}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001f40)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000002040)=0xe8) getsockname$packet(r3, &(0x7f0000002080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000020c0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000002100)={@local, 0x0}, &(0x7f0000002140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002200)={'ip6_vti0\x00', &(0x7f0000002180)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xf0, 0x8, 0x1, @private2, @mcast1, 0x40, 0x10, 0xe24, 0x1f}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002300)={'tunl0\x00', &(0x7f0000002240)={'gretap0\x00', 0x0, 0x80, 0x8, 0x1f, 0x4, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @remote, {[@end, @timestamp={0x44, 0x18, 0x4e, 0x0, 0xb, [0x8, 0x0, 0x80000, 0xe570, 0x80000000]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x72, 0x0, 0x6, [0x0]}, @ssrr={0x89, 0x27, 0xba, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @local, @remote, @multicast2, @loopback, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x42, 0x3, 0x6, [{@broadcast, 0xc34}, {@local, 0x1}, {@empty, 0x6}, {@private=0xa010102, 0x4d}, {@rand_addr=0x64010101}, {@rand_addr=0x64010100, 0x5}]}, @timestamp={0x44, 0x8, 0x6f, 0x0, 0x7, [0x7]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000002500)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x150, 0x0, 0x6, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8014}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000002540)={r1}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002580), 0x8840, 0x0) 14:52:24 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x200]}, 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa023}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xac}}, 0x240000d4) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x65}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff801}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x300, 0x70bd2a, 0x2, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_FILS_KEK={0x3f, 0xf2, "89817af075af5d99354a18a7538c8e92cd9683da1b34689998ed76b5f29f975026ae7c8d165494b3760aee066ee8174bde2aafe8ef4e9518e290ed"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x3, 0x7, 0x0, {0x6, 0x1ffa, 0x0, 0x1de, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x8000, 0x40}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20, {0x1f, 0x16f, 0x101, 0x3ff}}}, @NL80211_ATTR_FILS_KEK={0x28, 0xf2, "ad21bd8cde81b57c5737330bd9454aae5f5260e1b3850b52f63c73842fe5b0adf030b3d9"}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x24048000) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8a, 0x2}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x0, 0x5, 0x0, {0x8, 0x4, 0x0, 0x3fe, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x0, 0x3ff, 0x4c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x38}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_open_dev$vcsu(&(0x7f0000000780), 0x1000, 0x400100) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000940)=0x200, 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048844}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1001020}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, r6, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x50}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_MESH_SETUP={0x2c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x14}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xe1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48001) [ 90.911743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.920549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.922963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.924118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.925425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.926742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.929668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.930855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.931732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.935309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.937877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.939365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.940397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.945421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.946946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.970724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.972089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.973796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.976670] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.978991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.048612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.058690] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.059686] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.064493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.065974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.067517] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.079772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.082909] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.083293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.084184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.089248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.093398] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.096563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.097772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.100492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.101751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.108227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.116711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.119501] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.122528] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.007869] Bluetooth: hci3: command tx timeout [ 93.007888] Bluetooth: hci2: command tx timeout [ 93.008822] Bluetooth: hci1: command tx timeout [ 93.009806] Bluetooth: hci0: command tx timeout [ 93.200046] Bluetooth: hci4: command tx timeout [ 93.200262] Bluetooth: hci5: command tx timeout [ 93.201324] Bluetooth: hci7: command tx timeout [ 93.202506] Bluetooth: hci6: command tx timeout [ 95.055268] Bluetooth: hci0: command tx timeout [ 95.055301] Bluetooth: hci1: command tx timeout [ 95.055722] Bluetooth: hci2: command tx timeout [ 95.056248] Bluetooth: hci3: command tx timeout [ 95.247235] Bluetooth: hci5: command tx timeout [ 95.247713] Bluetooth: hci7: command tx timeout [ 95.248102] Bluetooth: hci4: command tx timeout [ 95.248636] Bluetooth: hci6: command tx timeout [ 97.104503] Bluetooth: hci1: command tx timeout [ 97.104717] Bluetooth: hci3: command tx timeout [ 97.104984] Bluetooth: hci0: command tx timeout [ 97.106423] Bluetooth: hci2: command tx timeout [ 97.295506] Bluetooth: hci6: command tx timeout [ 97.297311] Bluetooth: hci5: command tx timeout [ 97.298005] Bluetooth: hci4: command tx timeout [ 97.298192] Bluetooth: hci7: command tx timeout [ 99.152993] Bluetooth: hci2: command tx timeout [ 99.153036] Bluetooth: hci1: command tx timeout [ 99.153605] Bluetooth: hci0: command tx timeout [ 99.153907] Bluetooth: hci3: command tx timeout [ 99.343263] Bluetooth: hci7: command tx timeout [ 99.343679] Bluetooth: hci4: command tx timeout [ 99.344037] Bluetooth: hci6: command tx timeout [ 99.344629] Bluetooth: hci5: command tx timeout [ 134.233468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.234126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.446591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.448156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.666507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.667132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.785504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.787445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.913127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.914171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.979469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.980107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.110383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.110998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.267128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.268268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.334108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.334759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.439251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.440302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.545108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.545770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.582691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.583418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.611170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.611752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.675321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 14:53:10 executing program 4: poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35313233303831343700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b00cb2cc029f49d8b90449a7ecd54d49010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dff4655fdff4655fdff4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000dff4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000dff4655fdff4655fdff4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000dff4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000024a8270e00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011a00)="ed8100001a040000e0f4655fe0f4655fe0f4655f000000000000010004000000000000000100000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038ac705900000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3531323330383134372f66696c65302f66696c653000000000000000000000000000000000000000000000ae39138600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c412e2ee000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000012c00)) [ 135.741666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.742421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.755185] loop4: detected capacity change from 0 to 512 [ 135.773886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 14:53:10 executing program 4: poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35313233303831343700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b00cb2cc029f49d8b90449a7ecd54d49010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dff4655fdff4655fdff4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000dff4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000dff4655fdff4655fdff4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000dff4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000024a8270e00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011a00)="ed8100001a040000e0f4655fe0f4655fe0f4655f000000000000010004000000000000000100000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038ac705900000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3531323330383134372f66696c65302f66696c653000000000000000000000000000000000000000000000ae39138600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="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", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000012c00)) [ 135.819238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.866997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.867838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.888953] loop4: detected capacity change from 0 to 512 [ 135.905576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.979531] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.088661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.089339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.178823] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 14:53:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 14:53:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x5413, &(0x7f0000000280)) r3 = dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x8, 0x100) 14:53:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short}, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000040}, 0x4000) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x7ff, 0x81, {{0x40, 0x4, 0x3, 0xd, 0x100, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x1b, 0x84, [@private=0xa010100, @remote, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x3c, 0x22, 0x1, 0x4, [{@loopback, 0x40}, {@multicast1}, {@private=0xa010101}, {@broadcast, 0x7}, {@empty, 0x8}, {@empty, 0x47a}, {@loopback, 0x4}]}, @timestamp={0x44, 0x10, 0x7b, 0x0, 0x6, [0x3b1, 0x75, 0x5]}, @ssrr={0x89, 0xb, 0x93, [@broadcast, @remote]}, @cipso={0x86, 0x17, 0x1, [{0x4, 0x11, "7c5045a747cf154b6407231e8b700f"}]}, @noop, @timestamp_addr={0x44, 0x44, 0x2, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x2d}, {@private=0xa010101, 0x5}, {@multicast2, 0x356}, {@broadcast, 0x3ff}, {@multicast2, 0x2}, {@remote, 0x80000001}, {@loopback, 0x7ff}]}, @rr={0x7, 0x17, 0xc2, [@private=0xa010102, @multicast1, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0xc, [@multicast1]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4008041) 14:53:20 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8202, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7f, 0x400000) pwrite64(r2, &(0x7f0000000140)="3fff9f886b35365e7c54a1a9ef92c8daa8026b23f45663cbe8d102a480f22850ab0889f106a26023b7b0d25b5c110bac2f43b93452c930a7b3fe14148c5066e1280cc0c72ea6dcebbea86df2209f6893115e94bc63ad8103bde1801b69d4ce98ea2f8ec2cced94f166869e2cf701af7389f9918a5176d1ed529685a315c760c95a1e11b612e5464abf6b9f369d3e340045942a3a98e7a645a03593b2c4060015401ab871fc6874966dca93f3d22c5cb5168488207fa42769b71727fda057a146b913eb1a55b1a13600331bb9d647bd51fb45830d30b4c2182ad61034bf84c996c7ea54bd150a27b487f491b6cf124d", 0xef, 0x9) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x5413, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x2003002, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYRES16, @ANYBLOB="0430c41ee20b3d08257769f9b87cff7aca6ce822c02c5a5ef712a236203831df174cc94ba567341d169aa907e13bc59537a413bc765f044bb079273002119d653df77ad7824d34c2dfc29e5961f521992c99ae39efb08c15daa0fbf88dbd77a96c490bb145543b832b6b3d9ed1420138653f0432ffb300b3484d95124f343d277427ee9b8018ba32be5eefe7dfb7a910c48481240abef024a17fb9326bae72421e6990712a48b4ec232d6d", @ANYBLOB="3f76a9f6294a4e257e4d693309000000000000007c6b0af2378909b6f8f1f5694a7e1066f76e82d11cc715ed7c4e05858f64c45cfaeb6b03a2dc5214699d746b45b1f370cc114e0cfd7b92dc2c0cd71197226023f573fe3d2976ab2fce93dbddc8fb39754fb4d62fac1b0c1cc14d3815b9950447c63bcd2990d51d5fb671a83d2a8faf3e4245cc42d6ba159d5ef7e29411dbabd8dafbe72d586f1b126de32372df8f18de3d7efb168768c99271726df4521605248d4f5f5326748447ab726318b86f8b60d037bdac871d37af166d8cc071fd55e069d5b006e0f700f52c868c3eae0f0897e300f58b0d5f", @ANYRES64=r0]) 14:53:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in6=@remote, 0x0, 0x33}, @in=@multicast1}, 0x3}}, 0xf8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="800900b9fb5d6e3dec562400", @ANYRES16=r4, @ANYBLOB="25040000000000000000030000001400060076657468315f746f5f626174616476002700070073797374656d5f753a6f626a6563745f723a667573655f6465766963655f743a73300000140006007767320000000000000000000000000014000200fc01000000000000000000000000000008000400ac1414aa"], 0x80}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 14:53:20 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="23e8b611b0ec"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="870b28550172"}, @NL80211_ATTR_PMK={0x14, 0xfe, "715e81c08390218b973fac2fd7ad70c9"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 14:53:20 executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x2e) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6}, 0x6) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r5, @private=0xa010100, @rand_addr=0x64010100}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f37ace000000000000000000f49890183d098b1aa6ff", @ANYRES16=r7, @ANYBLOB="b353000000000000000001000000100002800c00018008000100f0000000"], 0x24}}, 0x0) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="10002dbd7000fbdbdf25070000007000018008000100", @ANYRES32=r8, @ANYBLOB="14000202000000000000080003000100000008000100e3625c1ebfc6e313fabf5b0136a00657b8aaaa9d70ef06e2e1caf67b187569c61a2d1ff650a52bc9e390bf715b826d693bccea7c9fd4b8533ee0e49acde03f41a89b3d21aa4d14973e03f3f7fd5a31160fa598a200"/121, @ANYRES32=r9, @ANYBLOB="080003000200000014000200626f6e645f736c6176655f310000000008000300030000000800030003000000140002007866726d300000000000000000000000040001801400018008000100", @ANYRES32=r5, @ANYBLOB="0800030002000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x60) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) close(r0) 14:53:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="002570000000080203000000000000000000", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a0006000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 146.548054] audit: type=1400 audit(1756738400.842:8): avc: denied { open } for pid=3940 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 146.555383] audit: type=1400 audit(1756738400.842:9): avc: denied { kernel } for pid=3940 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 146.599898] syz_tun: refused to change device tx_queue_len [ 146.608646] syz_tun: refused to change device tx_queue_len [ 146.609670] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 146.652778] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 146.672039] syz-executor.0 (3944) used greatest stack depth: 23360 bytes left 14:53:20 executing program 6: syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd}, {0x6, 0x24, 0x1a, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x103}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1f, 0x20, 0x11}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x8, 0xff}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x4, 0x0, 0x3, 0x20, 0x1}, 0xc4, &(0x7f0000000640)={0x5, 0xf, 0xc4, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x8, 0x4, 0xce}, @generic={0xb5, 0x10, 0xa, "f878570017fca2946387c22568005ea17b26a48ae51e9bfb6ef7922103aed1a15be6b48980d5ec68380fdb1c0a20e6ed9f6fa58978b0f599757cbedb64f31168056119d92fe9aa5c30dad4f7ac0581f9b9b442dc06e35bcd7c3ae90d4c37790cbc225ba091291ee57d3d0bae3f66fbf9b736d01dc7933a756acd35e93a532082089b7fb0cbd64d3c33b45527df02b85e73ef4ee90f85ee6f15710d468a534aa5d9ad2b4883409eb6ebccece3a5333de7d78e"}]}, 0x3, [{0x5c, &(0x7f0000000740)=@string={0x5c, 0x3, "cd21a5e54b09315decbb9bd9ce1bc8aeab345c30454830278a5d563552b2693765e4da06499bd7cb72f2328bfd72b21e0359551f950b219788417a567c46db10424f5a9a61db3105128f3bf4f8f4449c2b007832b1c57feb94b4"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x80, 0x3f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5a, 0x3, 0x81}}]}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x5, 0x1, 0x8, 0x3f}, 0x18, &(0x7f0000000080)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0x3, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0xff, 0x8800, 0x3}]}}) 14:53:21 executing program 5: r0 = io_uring_setup(0x49ee, &(0x7f00000000c0)={0x0, 0xf65e, 0x1, 0x1, 0x385}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x532, 0x8, '\x00', 0x1, &(0x7f0000000180)=[0x0]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[], 0x2e) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r7, 0x5413, &(0x7f0000000280)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x800) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000280)=[r7, r8, r2], 0x3) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0xd4000a8b) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) 14:53:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="002570000000080203000000000000000000", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a0006000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) [ 146.827629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:53:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="002570000000080203000000000000000000", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a0006000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 14:53:21 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000380)=[{&(0x7f0000000840)="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", 0x126, 0x1}], 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="687567653d77697468696e5f73697a652c687567653d6164766973652c61756469742c736d61636b6673666c6f6f723d2d22262f2c736d61636b6673726f6f743d000025295b2c2c7375626a5f747970653d3a2c726f6f74636f6e746578743d726f6f742c00e6473f557d23026826f17d54b846919579daedee39b0d5bb79fd66522518af9507b71a"]) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000540)=[{r0, 0x12}, {0xffffffffffffffff, 0x2703}, {0xffffffffffffffff, 0x2251}, {r1, 0x40}, {r2, 0x4104}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x4000}], 0x7, &(0x7f0000000580), &(0x7f00000005c0)={[0xc9af]}, 0x8) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x80000009e9) clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000780)=ANY=[@ANYBLOB="fb8a03a654b963a0bbaa3a2a3df1bcc5ff668b686fe1886d204c70e365b800e8879e4d9dbe7ddf8a0274dde5c3d99c9049e048383b4bd7d51ff26ab0a8755c5d4562471e9eed96196312c397e217166c029b39eca7c674e4ab79a806eed7e06a7d4d82743055da820e455e9d900e00"/121, @ANYRES32=r1, @ANYBLOB="3f00000006189a6db7690000002e2f664c6c653000"]) ppoll(&(0x7f0000000600)=[{r4, 0x2}, {r5, 0x8010}], 0x2, &(0x7f0000000640)={0x0, 0x3938700}, &(0x7f0000000680)={[0x1]}, 0x8) socket(0xa, 0x3, 0x6) fork() r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0xc00) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7ff) [ 146.838800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.861470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 14:53:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'lo\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x0, 0x0, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x0, &(0x7f0000000300)={[{}, {@dots}], [{@audit}]}) fsmount(r1, 0x0, 0x75) write$binfmt_elf64(r3, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x0, 0x20, 0x0, 0x9, 0x3, 0x0, 0x1, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2, 0x3f}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x0, 0x1f0}, {0x70000000, 0x449, 0x9, 0x10000, 0x8000, 0x9, 0x3, 0xd1}], "0cee748db37a7811d2d59472625e334d254811e306c185398ffef3418d6082ed0e89282230042b826104bc4ead3f11c43489ae0b74b4070c67c2cfd881c01ce38d28b2c944694589107102d76538e953677cf5995a1d4ecb53f6239a005fd9246eb081cc3f3f63", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x717) [ 146.869744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.897318] kmemleak: Found object by alias at 0x607f1a63d1b4 [ 146.897349] CPU: 1 UID: 0 PID: 3955 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 146.897385] Tainted: [W]=WARN [ 146.897393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 146.897406] Call Trace: [ 146.897413] [ 146.897422] dump_stack_lvl+0xca/0x120 [ 146.897467] __lookup_object+0x94/0xb0 [ 146.897500] delete_object_full+0x27/0x70 [ 146.897532] free_percpu+0x30/0x1160 [ 146.897564] ? arch_uprobe_clear_state+0x16/0x140 [ 146.897603] futex_hash_free+0x38/0xc0 [ 146.897645] mmput+0x2d3/0x390 [ 146.897682] do_exit+0x79d/0x2970 [ 146.897716] ? __pfx_do_exit+0x10/0x10 [ 146.897745] ? find_held_lock+0x2b/0x80 [ 146.897780] ? get_signal+0x835/0x2340 [ 146.897819] do_group_exit+0xd3/0x2a0 [ 146.897850] get_signal+0x2315/0x2340 [ 146.897885] ? __sys_sendto+0x210/0x570 [ 146.897920] ? __pfx___sys_sendto+0x10/0x10 [ 146.897955] ? __pfx_get_signal+0x10/0x10 [ 146.898000] arch_do_signal_or_restart+0x80/0x790 [ 146.898034] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 146.898066] ? fd_install+0x4ac/0x660 [ 146.898091] ? __sys_socket+0x9f/0x260 [ 146.898119] ? __pfx___sys_socket+0x10/0x10 [ 146.898152] ? __pfx_fput_close_sync+0x10/0x10 [ 146.898184] ? xfd_validate_state+0x55/0x180 [ 146.898226] exit_to_user_mode_loop+0x8b/0x110 [ 146.898250] do_syscall_64+0x2f7/0x360 [ 146.898275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.898299] RIP: 0033:0x7f6c71b188ac [ 146.898316] Code: Unable to access opcode bytes at 0x7f6c71b18882. [ 146.898326] RSP: 002b:00007f6c6f0da020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 146.898349] RAX: 0000000000000020 RBX: 00007f6c6f0da110 RCX: 00007f6c71b188ac [ 146.898364] RDX: 0000000000000020 RSI: 00007f6c6f0da160 RDI: 0000000000000003 [ 146.898378] RBP: 0000000000000000 R08: 00007f6c6f0da074 R09: 000000000000000c [ 146.898392] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f6c6f0da0c8 [ 146.898406] R13: 00007f6c6f0da160 R14: 0000000000000003 R15: 0000000000000000 [ 146.898436] [ 146.898444] kmemleak: Object (percpu) 0x607f1a63d1b0 (size 16): [ 146.898458] kmemleak: comm "syz-executor.0", pid 280, jiffies 4294813739 [ 146.898472] kmemleak: min_count = 1 [ 146.898479] kmemleak: count = 0 [ 146.898487] kmemleak: flags = 0x21 [ 146.898494] kmemleak: checksum = 0 [ 146.898501] kmemleak: backtrace: [ 146.898508] pcpu_alloc_noprof+0x87a/0x1170 [ 146.898539] __percpu_counter_init_many+0x44/0x360 [ 146.898565] mm_init+0xcac/0x1170 [ 146.898581] copy_process+0x3ab7/0x73c0 [ 146.898602] kernel_clone+0xea/0x7f0 [ 146.898622] __do_sys_clone+0xce/0x120 [ 146.898642] do_syscall_64+0xbf/0x360 [ 146.898661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.901410] loop2: detected capacity change from 0 to 264192 [ 146.923647] kmemleak: Cannot insert 0x607f1a63d1b4 into the object search tree (overlaps existing) [ 146.923677] CPU: 1 UID: 0 PID: 3978 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 146.923713] Tainted: [W]=WARN [ 146.923720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 146.923734] Call Trace: [ 146.923741] [ 146.923750] dump_stack_lvl+0xca/0x120 [ 146.923794] __link_object+0x190/0x210 [ 146.923829] __create_object+0x48/0x80 [ 146.923864] pcpu_alloc_noprof+0x87a/0x1170 [ 146.923911] __percpu_init_rwsem+0x2d/0x160 [ 146.923943] ? security_sb_alloc+0x75/0x140 [ 146.923976] alloc_super+0x29e/0xb80 [ 146.924007] sget_fc+0xfe/0xb80 [ 146.924030] ? __pfx_set_anon_super_fc+0x10/0x10 [ 146.924069] ? __pfx_shmem_fill_super+0x10/0x10 [ 146.924101] get_tree_nodev+0x28/0x190 [ 146.924126] vfs_get_tree+0x93/0x340 [ 146.924171] path_mount+0x132d/0x1dd0 [ 146.924200] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 146.924228] ? __pfx_path_mount+0x10/0x10 [ 146.924255] ? kmem_cache_free+0x2a1/0x540 [ 146.924276] ? putname.part.0+0x11b/0x160 [ 146.924309] ? getname_flags.part.0+0x1c6/0x540 [ 146.924346] ? putname.part.0+0x11b/0x160 [ 146.924382] __x64_sys_mount+0x27b/0x300 [ 146.924410] ? __pfx___x64_sys_mount+0x10/0x10 [ 146.924448] do_syscall_64+0xbf/0x360 [ 146.924473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.924496] RIP: 0033:0x7f41f5f8004a [ 146.924514] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 146.924536] RSP: 002b:00007f41f34f3fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 146.924559] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41f5f8004a [ 146.924574] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 0000000000000000 [ 146.924588] RBP: 00007f41f34f4040 R08: 00007f41f34f4040 R09: 0000000020000040 [ 146.924603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000040 [ 146.924617] R13: 0000000020000080 R14: 00007f41f34f4000 R15: 0000000020000140 [ 146.924648] [ 146.925445] kmemleak: Kernel memory leak detector disabled [ 146.925453] kmemleak: Object (percpu) 0x607f1a63d1b0 (size 16): [ 146.925467] kmemleak: comm "syz-executor.0", pid 280, jiffies 4294813739 [ 146.925481] kmemleak: min_count = 1 [ 146.925489] kmemleak: count = 0 [ 146.925496] kmemleak: flags = 0x21 [ 146.925504] kmemleak: checksum = 0 [ 146.925511] kmemleak: backtrace: [ 146.925518] pcpu_alloc_noprof+0x87a/0x1170 [ 146.925549] __percpu_counter_init_many+0x44/0x360 [ 146.925575] mm_init+0xcac/0x1170 [ 146.925593] copy_process+0x3ab7/0x73c0 [ 146.925613] kernel_clone+0xea/0x7f0 [ 146.925648] __do_sys_clone+0xce/0x120 [ 146.925668] do_syscall_64+0xbf/0x360 [ 146.925687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.946886] kmemleak: Automatic memory scanning thread ended [ 147.006313] audit: type=1400 audit(1756738401.289:10): avc: denied { watch_reads } for pid=3976 comm="syz-executor.5" path="/syzkaller-testdir860802507/syzkaller.pJd2RI/2/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 [ 147.020570] audit: type=1400 audit(1756738401.305:11): avc: denied { write } for pid=3979 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 147.091582] ------------[ cut here ]------------ [ 147.092450] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#0: syz-executor.5/290 [ 147.093672] Modules linked in: [ 147.094294] CPU: 0 UID: 0 PID: 290 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 147.097344] Tainted: [W]=WARN [ 147.098364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 147.101065] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 147.102611] Code: 05 d6 30 81 04 01 e8 71 df 91 ff e9 41 fc ff ff e8 27 47 b4 ff 31 ff 44 89 ee e8 4d 42 b4 ff 45 85 ed 79 09 e8 13 47 b4 ff 90 <0f> 0b 90 e8 0a 47 b4 ff e8 b5 2d fc 02 31 ff 89 c5 89 c6 e8 2a 42 [ 147.107177] RSP: 0018:ffff888015867c00 EFLAGS: 00010293 [ 147.107857] RAX: 0000000000000000 RBX: 1ffff11002b0cf85 RCX: ffffffff81bfaf93 [ 147.108773] RDX: ffff888016315280 RSI: ffffffff81bfaf9d RDI: 0000000000000005 [ 147.109704] RBP: ffff88801e5016c0 R08: 0000000000000001 R09: 0000000000000000 [ 147.110621] R10: 00000000fffffffe R11: 0000000000000001 R12: ffff888015867c68 [ 147.111539] R13: 00000000fffffffe R14: dead000000000100 R15: ffff88801e5016c0 [ 147.112462] FS: 00005555897ea400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 147.113506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.114275] CR2: 00007ffd62480ff8 CR3: 0000000045e14000 CR4: 0000000000350ef0 [ 147.115197] Call Trace: [ 147.115533] [ 147.115829] ? __pfx_autoremove_wake_function+0x10/0x10 [ 147.116538] ? __pfx_mntput_no_expire+0x10/0x10 [ 147.117170] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 147.117787] ? shrink_dentry_list+0x1a/0x650 [ 147.118388] ? up_write+0x195/0x520 [ 147.118872] namespace_unlock+0x7f1/0x810 [ 147.119437] ? __pfx_namespace_unlock+0x10/0x10 [ 147.120044] ? find_held_lock+0x2b/0x80 [ 147.120588] ? lock_release+0xc8/0x290 [ 147.121101] path_umount+0x6a4/0x1100 [ 147.121626] ? kmem_cache_free+0x2a1/0x540 [ 147.122199] ? __pfx_path_umount+0x10/0x10 [ 147.122741] ? putname.part.0+0x11b/0x160 [ 147.123335] __x64_sys_umount+0x15c/0x190 [ 147.123875] ? __pfx___x64_sys_umount+0x10/0x10 [ 147.124504] do_syscall_64+0xbf/0x360 [ 147.125000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.125688] RIP: 0033:0x7f41f5f7ff87 [ 147.126190] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 147.128475] RSP: 002b:00007ffd62481298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 147.129451] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f41f5f7ff87 [ 147.130379] RDX: 00007ffd62481369 RSI: 000000000000000a RDI: 00007ffd62481360 [ 147.131298] RBP: 00007ffd62481360 R08: 00000000ffffffff R09: 00007ffd62481130 [ 147.132216] R10: 00005555897ebc7b R11: 0000000000000246 R12: 00007f41f5fd8105 [ 147.133110] R13: 00007ffd62482420 R14: 00005555897ebc20 R15: 00007ffd62482460 [ 147.134045] [ 147.134380] irq event stamp: 169937 [ 147.134837] hardirqs last enabled at (169945): [] __up_console_sem+0x78/0x80 [ 147.135953] hardirqs last disabled at (169954): [] __up_console_sem+0x5d/0x80 [ 147.137066] softirqs last enabled at (169804): [] handle_softirqs+0x50c/0x770 [ 147.138222] softirqs last disabled at (169797): [] __irq_exit_rcu+0xc4/0x100 [ 147.139346] ---[ end trace 0000000000000000 ]--- [ 147.170637] loop2: detected capacity change from 0 to 264192 [ 147.200062] ------------[ cut here ]------------ [ 147.200850] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#0: syz-executor.5/290 [ 147.202044] Modules linked in: [ 147.202492] CPU: 0 UID: 0 PID: 290 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 147.203968] Tainted: [W]=WARN [ 147.204386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 147.205412] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 147.206042] Code: 05 d6 30 81 04 01 e8 71 df 91 ff e9 41 fc ff ff e8 27 47 b4 ff 31 ff 44 89 ee e8 4d 42 b4 ff 45 85 ed 79 09 e8 13 47 b4 ff 90 <0f> 0b 90 e8 0a 47 b4 ff e8 b5 2d fc 02 31 ff 89 c5 89 c6 e8 2a 42 [ 147.208278] RSP: 0018:ffff888015867ce0 EFLAGS: 00010293 [ 147.208935] RAX: 0000000000000000 RBX: 1ffff11002b0cfa1 RCX: ffffffff81bfaf93 [ 147.209846] RDX: ffff888016315280 RSI: ffffffff81bfaf9d RDI: 0000000000000005 [ 147.210742] RBP: ffff88801e5016c0 R08: 0000000000000001 R09: 0000000000000000 [ 147.211634] R10: 00000000fffffffd R11: 0000000000000001 R12: ffff888015867d48 [ 147.212534] R13: 00000000fffffffd R14: ffff88801e5016c0 R15: ffff88801e5017a8 [ 147.213435] FS: 00005555897ea400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 147.214458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.215197] CR2: 000000002045f000 CR3: 0000000045e14000 CR4: 0000000000350ef0 [ 147.216081] Call Trace: [ 147.216450] [ 147.216744] ? __pfx_mntput_no_expire+0x10/0x10 [ 147.217391] ? dput.part.0+0xce/0x930 [ 147.217896] ? lock_release+0xc8/0x290 [ 147.218418] path_umount+0x6e0/0x1100 [ 147.218901] ? kmem_cache_free+0x2a1/0x540 [ 147.219453] ? __pfx_path_umount+0x10/0x10 [ 147.219985] ? putname.part.0+0x11b/0x160 [ 147.220537] __x64_sys_umount+0x15c/0x190 [ 147.221057] ? __pfx___x64_sys_umount+0x10/0x10 [ 147.221676] do_syscall_64+0xbf/0x360 [ 147.222188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.222825] RIP: 0033:0x7f41f5f7ff87 [ 147.223311] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 147.225552] RSP: 002b:00007ffd62481298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 147.226522] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f41f5f7ff87 [ 147.227419] RDX: 00007ffd62481369 RSI: 000000000000000a RDI: 00007ffd62481360 [ 147.228320] RBP: 00007ffd62481360 R08: 00000000ffffffff R09: 00007ffd62481130 [ 147.229215] R10: 00005555897ebc7b R11: 0000000000000246 R12: 00007f41f5fd8105 [ 147.230101] R13: 00007ffd62482420 R14: 00005555897ebc20 R15: 00007ffd62482460 [ 147.231019] [ 147.231342] irq event stamp: 170441 [ 147.231793] hardirqs last enabled at (170449): [] __up_console_sem+0x78/0x80 [ 147.232880] hardirqs last disabled at (170458): [] __up_console_sem+0x5d/0x80 [ 147.233979] softirqs last enabled at (170254): [] handle_softirqs+0x50c/0x770 [ 147.235090] softirqs last disabled at (170249): [] __irq_exit_rcu+0xc4/0x100 [ 147.236170] ---[ end trace 0000000000000000 ]--- [ 147.401354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.408993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.644018] BUG: Bad rss-counter state mm:000000000db42025 type:MM_ANONPAGES val:-22 Comm:syz-executor.0 Pid:3984 SYZFAIL: failed to write(kmemleak, "scan") (errno 1: Operation not permitted) BUG: leak checking failed VM DIAGNOSIS: 14:53:21 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888015867578 R8 =0000000000000000 R9 =ffffed10016ce046 R10=0000000000000000 R11=0000000000000001 R12=0000000000000005 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555897ea400 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd62480ff8 CR3=0000000045e14000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffff0000ff000000 XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=35706f6f6c2f6b636f6c622f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=000055b155f796500000000400000002 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000020000000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81afda14 RCX=ffff888017797804 RDX=1ffff11002ef2f21 RSI=ffffffff85c1c760 RDI=ffffffff81afda14 RBP=ffffffff81afda14 RSP=ffff888017797878 R8 =ffffffff8682b202 R9 =ffff8880177978f0 R10=000000000003bea3 R11=0000000000012bb3 R12=ffff888017797978 R13=0000000000000000 R14=ffff8880158dd280 R15=0000000000000000 RIP=ffffffff81434dce RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555888b1c58 CR3=0000000047853000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000ff0000000000000000 XMM01=62246574697277003233666c655f746d XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000