Warning: Permanently added '[localhost]:7362' (ECDSA) to the list of known hosts.
2025/11/15 11:33:24 fuzzer started
2025/11/15 11:33:24 dialing manager at localhost:37161
syzkaller login: [   59.546123] cgroup: Unknown subsys name 'net'
[   59.605469] cgroup: Unknown subsys name 'cpuset'
[   59.618176] cgroup: Unknown subsys name 'rlimit'
2025/11/15 11:33:35 syscalls: 203
2025/11/15 11:33:35 code coverage: enabled
2025/11/15 11:33:35 comparison tracing: enabled
2025/11/15 11:33:35 extra coverage: enabled
2025/11/15 11:33:35 setuid sandbox: enabled
2025/11/15 11:33:35 namespace sandbox: enabled
2025/11/15 11:33:35 Android sandbox: enabled
2025/11/15 11:33:35 fault injection: enabled
2025/11/15 11:33:35 leak checking: enabled
2025/11/15 11:33:35 net packet injection: enabled
2025/11/15 11:33:35 net device setup: enabled
2025/11/15 11:33:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/11/15 11:33:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/11/15 11:33:35 USB emulation: enabled
2025/11/15 11:33:35 hci packet injection: enabled
2025/11/15 11:33:35 wifi device emulation: enabled
2025/11/15 11:33:35 802.15.4 emulation: enabled
2025/11/15 11:33:35 fetching corpus: 0, signal 0/0 (executing program)
2025/11/15 11:33:36 starting 8 fuzzer processes
11:33:36 executing program 0:
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000))
r0 = socket(0x27, 0x800, 0x3)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x250, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x28}}}}, [@NL80211_ATTR_IE={0x1b9, 0x2a, [@perr={0x84, 0xf6, {0x48, 0x10, [@ext={{}, @broadcast, 0x80000001, @device_a, 0x3b}, @not_ext={{}, @broadcast, 0xfff, "", 0x1}, @ext={{}, @device_a, 0x0, @device_b, 0x1d}, @not_ext={{}, @device_b, 0x0, "", 0x1e}, @ext={{}, @broadcast, 0xd808, @device_a, 0x5}, @not_ext={{}, @device_a, 0x4, "", 0x2f}, @ext={{}, @device_a, 0x3ff, @device_b, 0x2}, @not_ext={{}, @broadcast, 0x5, "", 0xa}, @not_ext={{}, @device_b, 0xed3, "", 0x3a}, @ext={{}, @device_b, 0x9, @device_b, 0x39}, @not_ext={{}, @broadcast, 0x7, "", 0x1b}, @not_ext={{}, @device_b, 0xc23, "", 0xd}, @ext={{}, @device_a, 0x0, @device_a, 0x30}, @not_ext={{}, @device_a, 0xd9, "", 0x2}, @not_ext={{}, @device_b, 0x3f, "", 0x31}, @not_ext={{}, @broadcast, 0x1000, "", 0xb}]}}, @random_vendor={0xdd, 0xb8, "4a476035e974cb651ef5f8d7f7bc789eb98adddbf7f31079c82fa2ee7864992fb47128ebe6b3e7c7ab753eee3af1b9e7cda2dadf59e84924f30a7755e54e4a12e6324b2dccdc0a66b3745b4024f1bea98a3c3a3a97390325d3ce49f022e1f499a3a9f114cb1c0a8d8fb34f784fa9b5325b0a2b02e70bef7ef258e1ac1f3fdfb8eb7acaa9adfed2d5b0b42db48fe189a345a0b5a3e2f9c5db3b7934cb0736c2de7100819892ac5ce11b23a0460607fc294415978cc5893288"}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0x60, 0x2a, [@tim={0x5, 0x5a, {0x1, 0x1a, 0x1f, "030d51c2a5006c99ba1fb57d6d31050d243162a54fbb89818892df9212546244dcf187a42f47bed64abfbf7611513805ca29dd811b29f91ceb1868ad9f14e40675af5d1cb9b158b4c408de04916e6684ad3714be9e4137"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x250}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000015c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f00000003c0)={0x11a0, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x112f, 0x2a, [@measure_req={0x26, 0x1003, {0x0, 0x1, 0xfb, "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"}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @tim={0x5, 0xe6, {0xe0, 0x82, 0xfd, "9d461f6efef722bf55cca34d8878bcee9a8b9c31612059220eda9e8558386733115e757fa1fb97f8cef673158eb8f897aee9ec43e76d6e144b3681fb90223f60b025e2e6e8a8aa12717c4dd565196434089bb90efa02108da6893edc3c87fb5b3171af36da700272d09d71b0fa5f251a5cf290bb9bda2109f042abec755de847a0eafe10c9b525d039d54f301f17942204e28248025b52bf4b9dd8a40aa2bd3b5598efd84faad4936fdfe1e6d657bcd758235bdf0bf92a41949c158790a3a2d3a5511ce6268e83d274a4edb0773c51f6e174948cfca051893804fe9f72760b40bc93ee"}}, @cf={0x4, 0x6, {0x40, 0x9, 0x5194, 0x7}}, @dsss={0x3, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x80, 0x9, 0x7}}, @random_vendor={0xdd, 0x14, "c96666914a3b24f0ed3e52ee9d7f2b670921d6a3"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x40805}, 0x1)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x31, 0x50}}}}}, 0x28}}, 0x50)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001700)=0x1, 0x4)
socketpair(0x6, 0x5, 0x8, &(0x7f0000001b40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000001d80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x178, 0x0, 0x19c, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x295}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7d2d}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20060050}, 0x40840)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000002140)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f0000001e00)={0x2dc, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x27c, 0x33, @data_frame={@no_qos=@type01={{0x0, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @initial, @device_b, {0x9, 0xca3}}, @a_msdu=[{@device_b, @device_b, 0xbd, "1bbed5be9552fce0e660308f715968f9395c645330444117a0c6466aced79603b6e4895d1f1bfda8e575e6225eb7a7d2b43e7092db72604b4499cabed86e7b47e9042874ad66897b96dc335f4842a83ac7cf62a782b68b6bf870a2d99cc2f9d0d8d6197e4aeab09fb90335e64ec47191b8f3ac2cc9e0f519db2d9d71b94bf9fd40d554add04e9e495c6beec7c8e02da369a9e0e425370136ff762a6f6fcb8f2aca6e2e3b98cb2d1df623be033f797e65843d359670d55d7d76edfc951b"}, {@device_a, @broadcast, 0xf, "4fdb6cacfe182acd4364649fc7d4b2"}, {@device_a, @device_b, 0x7f, "ce5d76f2f936f73ed69b21608db633bdb0437218606d0da7b355a5d4af8dc143bd82878279e1c4be20e337e2ad73626f6f724fea0478d5a78f5e42e437e3a0440a3df4b62f25ca07add66d9595b7780921ce5ffbd6a7fac22e46bc88389f27381a420931aca78b0cc782e1a6085e3b108c42bc82fb9d00ea1240baa33d0ab7"}, {@device_a, @device_a, 0x99, "b69bc289fff8168bfffa9b196c07aaa703087f7dc12537e04f49048025cba3e73bc9629ee23ad853d64502a8bd18ff2c152b84511151b27570aeff9a2ae79152d6a4f4a6c3aeb9668cdd39432bb1ff4b483949578e4e726253474ac1e066da387c2bc1948479e4b305bc3822bc97820b0a7602c08ca4d45e6c882acae4a2abd97800708aaff981b338969689a5df6725bd9401cfca989900e5"}, {@device_a, @device_b, 0x2b, "444adbc4348762e06895f16373ee4bf776ae8d3496c7521c1da6a39a638a10006c7f41ec54be7e0ce538b3"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x45b}, @device_a, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x16}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x8}, 0x4000000)
recvmmsg$unix(r3, &(0x7f0000002480)=[{{&(0x7f0000002180), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002200)=""/92, 0x5c}, {&(0x7f0000002280)=""/251, 0xfb}, {&(0x7f0000002380)=""/3, 0x3}], 0x3, &(0x7f0000002400)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}], 0x78}}], 0x1, 0x20102, &(0x7f00000024c0)={0x0, 0x3938700})
ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000002500))
socketpair(0x27, 0xa, 0x7, &(0x7f0000002540)={<r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x80, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x64}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x80}, 0x1, 0x0, 0x0, 0x6}, 0x4800)
r8 = accept4(r2, &(0x7f00000026c0)=@in={0x2, 0x0, @private}, &(0x7f0000002740)=0x80, 0x800)
sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000028c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000002a80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002900)={0x114, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x69, 0x2a, [@mesh_id={0x72, 0x6}, @random={0x2, 0x53, "ac3a0d8ae624432ac8955ca76cc0f25ea0e63f93bf0dbc16acb8d5ba086891de6cc117bd40c011d4d767bcc6f6a360ff9c7ef1b7881818ba75ddb4239968d8fda97fba681b9f87f2825e3c71e40a531c3141f4"}, @mesh_chsw={0x76, 0x6, {0x8, 0xb, 0x35, 0x1}}]}, @NL80211_ATTR_IE={0x5d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb7, 0x4}}, @ssid={0x0, 0x6, @default_ap_ssid}, @preq={0x82, 0x25, @not_ext={{0x0, 0x1, 0x1}, 0x6, 0x5, 0x200, @broadcast, 0x9, "", 0x5, 0x7, 0x1, [{{}, @device_a, 0x6}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x18, {0xfab, "776c274fdf4c", @long="e0efcc697389bd2b35402e473b61880e"}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20040080}, 0x200040d1)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r5)
sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x38, r10, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x514, 0x49}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

11:33:36 executing program 1:
r0 = shmget(0x2, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f00000000c0)}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/163, 0xa3}], 0x7, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000002840)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/84, 0x54}, {&(0x7f0000002600)=""/179, 0xb3}, {&(0x7f00000026c0)=""/226, 0xe2}, {&(0x7f00000027c0)=""/104, 0x68}], 0x6, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r1=>0x0}}}], 0x20}}, {{&(0x7f0000002900), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002980)=""/188, 0xbc}, {&(0x7f0000002a40)=""/232, 0xe8}, {&(0x7f0000002b40)=""/48, 0x30}, {&(0x7f0000002b80)=""/55, 0x37}, {&(0x7f0000002bc0)=""/5, 0x5}, {&(0x7f0000002c00)=""/48, 0x30}, {&(0x7f0000002c40)=""/59, 0x3b}], 0x7}}], 0x3, 0x12103, &(0x7f0000002dc0)={0x77359400})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002e00)={0x0, <r2=>0x0})
shmctl$IPC_SET(r0, 0x1, &(0x7f0000002e80)={{0x3, 0xffffffffffffffff, 0x0, 0xee00, r1, 0x9, 0x8be6}, 0xfffffffe, 0x0, 0x0, 0x1, r2, 0x0, 0x4})
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000002f00)=""/32)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000002f40)=""/77)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000002fc0)=""/4096)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000003fc0)=""/4096)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000004fc0)=""/235)
shmctl$IPC_INFO(r0, 0x3, &(0x7f00000050c0)=""/182)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ifreq(r3, 0x8915, &(0x7f00000051c0)={'bond_slave_0\x00', @ifru_data=&(0x7f0000005180)="9e5d019ae45549f60a4b6aeb0d5f65109dd96cd14a5a5ec1a6719bc10bb5a602"})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000063c0)={&(0x7f0000005200)=@abs, 0x6e, &(0x7f0000006380)=[{&(0x7f0000005280)=""/245, 0xf5}, {&(0x7f0000005380)=""/4096, 0x1000}], 0x2}, 0x40000021)
r4 = accept4(r3, &(0x7f0000006400)=@x25, &(0x7f0000006480)=0x80, 0xc00)
r5 = shmget(0x3, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil)
recvmsg$unix(r4, &(0x7f0000006740)={&(0x7f00000064c0)=@abs, 0x6e, &(0x7f00000065c0)=[{&(0x7f0000006540)=""/120, 0x78}], 0x1, &(0x7f0000006600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0xa2)
r7 = syz_genetlink_get_family_id$fou(&(0x7f00000067c0), r4)
sendmsg$FOU_CMD_DEL(r6, &(0x7f00000068c0)={&(0x7f0000006780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006880)={&(0x7f0000006800)={0x68, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x68}}, 0x4004010)
shmat(r5, &(0x7f0000ffa000/0x3000)=nil, 0x4000)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000069c0)={&(0x7f0000006900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006980)={&(0x7f0000006940)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}, 0x1, 0x0, 0x0, 0x1880}, 0x44)

11:33:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x57}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}}, 0x8850)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x76}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b8d97581673d039d79adda25b76d960c"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000010)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x17c, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_IE={0x1e, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x7, 0x9, @broadcast, 0x5, 0xe9be, 0xfffff800}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE={0x33, 0x2a, [@cf={0x4, 0x6, {0x7, 0xe0, 0x7f, 0x1000}}, @prep={0x83, 0x25, @ext={{}, 0x20, 0x4, @device_b, 0x4f, @broadcast, 0xffffffff, 0x5, @device_b, 0x80000000}}]}, @NL80211_ATTR_IE={0x42, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x1f, @not_ext={{}, 0x16, 0xc8, @device_b, 0x0, "", 0x80000000, 0x8, @device_b, 0x5}}, @challenge={0x10, 0x1, 0xa1}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x6, 0x20, @device_b, 0x6, 0xd0, 0x81}}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@perr={0x84, 0x70, {0x6, 0x8, [@not_ext={{}, @device_a, 0x3, "", 0x11}, @not_ext={{}, @device_b, 0x0, "", 0x32}, @not_ext={{}, @device_a, 0xd4, "", 0x26}, @not_ext={{}, @device_b, 0x100, "", 0x31}, @not_ext={{}, @device_b, 0x401, "", 0x34}, @ext={{}, @device_a, 0x80000001, @device_a, 0x24}, @not_ext={{}, @device_b, 0xfffffffb, "", 0x40}, @not_ext={{}, @broadcast, 0x5, "", 0x4}]}}, @perr={0x84, 0x3c, {0x1f, 0x4, [@not_ext={{}, @broadcast, 0x8, "", 0x3d}, @not_ext={{}, @device_b, 0x8, "", 0x3c}, @not_ext={{}, @broadcast, 0x5, "", 0x11}, @ext={{}, @broadcast, 0x3, @device_a, 0x1a}]}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "b9baef6d7b6460c5dd10cc823c49d99c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "0d1770b5071a21297a168c9260e451f3"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x8880}, 0x400c011)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc4, r4, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xbb, 0x1}, {0x3, 0x2}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x7}, {0xca, 0x6}], "e35b3ba95a31cebf"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x2}, {0x4, 0x6}, {0x62, 0x5}, {0x81, 0x5}], "08be6d0149684486"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x80, 0x3}, {0xc7, 0x7}, {0x8, 0x4}, {0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x9, 0x1}, {0x20, 0x1}, {0x3, 0x1}, {0x1f, 0x1}, {0x37, 0x3}, {0x1f, 0x1}, {0x6, 0x2}, {0x5, 0x5}], "4b54d3adbea87311"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x5, 0x6}, {0x9, 0x7}, {0x8, 0x2}, {0x9, 0x5}, {0xff, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x1}, {0x2, 0x7}, {0xe0, 0x3}, {0xfc, 0x4}, {0x5, 0x2}, {0x8, 0x7}, {0x9, 0x7}, {0x7f, 0x2}], "07263840b3066669"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xa, 0x7}, {0xf6, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x5}, {0xf8, 0x4}, {0xcc, 0x5}, {0x1, 0x2}, {0x80}, {0x2, 0x7}, {0x0, 0x3}, {0xff, 0x6}, {0x0, 0x7}, {0x2, 0x2}, {0x8, 0x2}], "1e47117a64b8f1b9"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8481}, 0x61)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x4}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xc3, 0x4}, {0x20, 0x4}, {0x1, 0x6}, {0x66, 0x2}, {0x40, 0x3}, {0x9, 0x2}], "acfc77ddf33240b4"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x1}, {0x3}, {0x17, 0x3}, {0x0, 0x6}, {0xf9, 0x2}, {0x5, 0x1}, {0xaa, 0x6}, {0x0, 0x4}, {0x4, 0x5}, {0x5, 0x4}], "5674c2b84a550c6b"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040801)
r5 = socket(0x27, 0x1, 0x7fffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, r6, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
recvmmsg$unix(r5, &(0x7f00000019c0)=[{{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f00000014c0)=""/42, 0x2a}, {&(0x7f0000001500)=""/8, 0x8}, {&(0x7f0000001540)=""/117, 0x75}, {&(0x7f00000015c0)=""/118, 0x76}, {&(0x7f0000001640)=""/59, 0x3b}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/182, 0xb6}, {&(0x7f0000001800)=""/113, 0x71}], 0x8, &(0x7f0000001900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x40010123, &(0x7f0000001a00)={0x0, 0x989680})
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000001dc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001ac0)={0x2b0, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92bc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff85d0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x26, 0x3, "f7db048eb4c1135f0ac1bbd193923e6af6f392b7deb90e69f67889b46b90ad622da3"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "27c0b5a101b7aaf9e91f7bcb1709fb6e4f151120a782297a918b851fc078e712ef98"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3fe4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8b04}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfdb5}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x408a5be8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x522be340}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000006b80)={&(0x7f0000006ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006b40)={&(0x7f0000006b00)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x24}}, 0x4000)

11:33:36 executing program 7:
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x238, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x70}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6f3d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3cc}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x134, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b9f2ba7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a6}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x711}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x675}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "3ed2a00fa257e948551826fadddaea4a047ab048f574f771"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b18}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x40000)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@xdp, &(0x7f0000000500)=0x80, 0x80000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x810)
socketpair(0x15, 0x5, 0x2, &(0x7f0000000880)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40)
recvmsg(r1, &(0x7f0000000c80)={&(0x7f00000009c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/8, 0x8}, {0xfffffffffffffffe}, {&(0x7f0000000a80)=""/22, 0x16}, {&(0x7f0000000ac0)=""/186, 0xba}, {&(0x7f0000000b80)=""/65, 0x41}], 0x5}, 0x40002141)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d00)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x90, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x35}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xc1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x36, 0xac, "fc1a3ff6d1263837965b954f96e104110403903108b3e9334f11db84aac69ce49e5cf2d39be19dca1e9bb1e16df4795abbe5"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, [{0x36}, {0xc}, {0x2, 0x1}, {0x12}, {0x14}, {0x4}, {0x3}, {0x12, 0x1}, {0xc}, {0xc}, {0x5, 0x1}, {0x1b, 0x1}, {0x4, 0x1}, {0xc, 0x1}, {0x1}, {0x1b, 0x1}, {0x12, 0x1}, {0x62, 0x1}, {0x60}, {0x2, 0x1}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x529}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x44000}, 0x4008801)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r1)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xc0, r10, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x600}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xac}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800)

11:33:36 executing program 3:
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x50}}, 0x40)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x36c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x233d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x791}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff1a19}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "f8bd1d01b70a37e2717a8c86636cfcc645dd0213a1d175d4b9af0929aa"}}, @TIPC_NLA_NODE_ID={0x68, 0x3, "10f3a6f56730fd7247b57143723a3cdbbaf41993c8aa5f1567390430ed532420a4e286d3161259e3488a296c8bfe29780e2653ebbf7edfba0510d2eb1959dc97ebcd91266f854c9020e27fe4d21c9ccce8024ebedb640ec2c1361ca452c5d5e7e6a72ada"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2d4bac6ac754c5dff2271339b531a2f02295142e7daa8e69c87be34bdeabe97305bce9"}}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd68c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd08}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x40048c4}, 0x4000000)
r0 = socket(0xf, 0x3, 0xb83e)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x9}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4ae}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffe}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40489}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xec, r1, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e81ebded5a10f36c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="33796af669108868997699971ea4af972dea9b2a41493d69d4af9894b48be9f2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c72ea8b312cd587c"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a517a75387d19654"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ddeccc9288305cb5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d52ebed3a3e1fb4b331b085f1bfbeaa"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a684b21d61ecd5b290d14eed8e6504db"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fc9f9169896cbc92"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "92cccd744dada876"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4db27aecc38eda5711cb5f43a126e757122cf809dd77b474a6daaeb4c5242006"}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000800}, 0x40)
r2 = accept4(r0, &(0x7f0000000a00)=@in, &(0x7f0000000a80)=0x80, 0x80800)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8001}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
socketpair(0x2c, 0x800, 0x9, &(0x7f0000000c00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000d40), 0x280001, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000ec0)={&(0x7f0000000d80), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x190fed16, 0x8}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x30}}, 0x40)
r8 = socket(0x1, 0xa, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x174, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @ibss={0x6, 0x2, 0x2}]}, @NL80211_ATTR_IE={0x10a, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0xf9, {0x80, 0xb0, 0x9, "b8bc4847aeaa8f4889c59fc6aa2d578af6cbe574b28a3a37216422956cc0b15ba18e7551e5173f9da9d2b74348bf7a9c4d7a5f307a108d0b0282e6fb5609c09f25f5ca81b52baeb99e0fffeecaca9fad59fa6006f0a44e0b5b6f083b4d0a1a25b4a4eaf33865e86fb488a586176f94e9a5bf505a676e7e9c8d68b8e6ed95cdbbe16f2280238bfbf80a27e5df4738d5b816e25d20eb3f420c7bd2e38621f24cd1e8156dc9a10fc27c82b4ef8449176307a579de126e770afa17bc0c5e212b66e93595f177b5d9f596290e110226f2cdf18c01ca30ec86dd65cc7da7b8faf94d2967f29ab50d713c80f7c2ccb38aa86de145dac5425413"}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}]}, 0x174}, 0x1, 0x0, 0x0, 0x50}, 0x48080)
sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7e, 0x63}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x15b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "b332d121c5ba0dc4bb3a5e69b96c853b"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x14044011)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}}, 0x801)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

11:33:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x97f4d961a0cc69e6}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf0, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfff7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x52}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000780)={&(0x7f0000000480), 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x20c, r2, 0x1, 0x70bd29, 0x1, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "443e688b2ac32e4b58baa7f5ba25c8bdaa94553a60959fb814ec72eb9bda9af3653ac8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff7b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7d3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xfffffffc}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1c6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x801}, 0x8081)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x190, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x5d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xf0}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000020}, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, r5, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r6)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20018000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x7c, r1, 0x100, 0x70bd27, 0x77f, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x50d}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x44f}, {0x6}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040084}, 0x2404c040)
socketpair(0x9, 0x800, 0x14000000, &(0x7f0000000e80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000060}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r5, 0x2, 0x70bd29, 0xff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040100)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xa8, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5a}}}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x16a3}, @device_b, @device_a, @from_mac=@broadcast, {0x4, 0x7f}}, @ver_80211n={0x0, 0xf31, 0x2, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x1}}}}, @NL80211_ATTR_FRAME={0x3d, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @device_a, @broadcast, @random="02af355bea27", {0x8, 0x3}}, @tdls_setup_req={0xc, 0x0, "", 0x6, @val=0x8, @val={0x1, 0x6, [{0xc, 0x1}, {0x30, 0x1}, {0x6c, 0x1}, {0x3}, {0x6, 0x1}, {0xb}]}, @void, @val={0x65, 0x12, {@initial, @device_b, @broadcast}}}}}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @random="1c6c3c02ab8c", {0x0, 0x9}}, @ver_80211n={0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1b, @void}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x8084)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r8)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000001380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x144, r10, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x3}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xc0f}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x44, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6000}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_60GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000000}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x84, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x101}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x50ea}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x101}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf74}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1f, 0x0, @random="3118e1dd720ad79f678882aa2c3938638058ed45ff0117ffa35e4e"}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000017c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001440)={0x328, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x60f39d6d, @empty, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff95}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc, 0x3, "d26ebdbbd76ded93"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c1ce4c709591d02288f732d827404f313281ffdc265d1be80bfd22dc"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "0a0b843ef222c025114561edc0de5da0d659b4efd167"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24e8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40}, 0x0)

11:33:36 executing program 6:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf5}, {0x6, 0x11, 0x1f}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x420480, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x218, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @local, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x20, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x999}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, '\x00', 0x23}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x63d, @remote, 0x48a}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xafb6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x92}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4001}, 0x4044800)
recvmmsg$unix(r1, &(0x7f0000000880)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/56, 0x38}, {&(0x7f00000006c0)=""/45, 0x2d}, {&(0x7f0000000700)=""/5, 0x5}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x1, 0x40002022, &(0x7f00000008c0)={0x0, 0x3938700})
sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x73}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7a42a9d8e96df4d04e2a6978ff98d2ac"}, @NL80211_ATTR_PMK={0x14, 0xfe, "646d8336cd2aaa001597f8a896ddb74f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9440cfb79125ecdfeaacaa80d51e98bc"}]}, 0x64}, 0x1, 0x0, 0x0, 0x400d1}, 0x40021)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r7)
recvmmsg$unix(r3, &(0x7f0000009300)=[{{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001140)=""/35, 0x23}, {&(0x7f0000001180)=""/214, 0xd6}], 0x2, &(0x7f00000012c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001440)}, {&(0x7f0000001480)=""/237, 0xed}, {&(0x7f0000001580)=""/198, 0xc6}, {&(0x7f0000001680)=""/4, 0x4}], 0x4, &(0x7f0000001700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001780), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001800)=""/205, 0xcd}, {&(0x7f0000001900)=""/172, 0xac}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/242, 0xf2}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001b80)=""/58, 0x3a}, {&(0x7f0000001bc0)=""/127, 0x7f}, {&(0x7f0000001c40)=""/155, 0x9b}], 0x5, &(0x7f0000001d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000003440)=[{&(0x7f0000001e80)=""/226, 0xe2}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/250, 0xfa}, {&(0x7f0000003080)}, {&(0x7f00000030c0)=""/76, 0x4c}, {&(0x7f0000003140)=""/76, 0x4c}, {&(0x7f00000031c0)=""/233, 0xe9}, {&(0x7f00000032c0)=""/107, 0x6b}, {&(0x7f0000003340)=""/244, 0xf4}], 0x9, &(0x7f0000003500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000005740)=[{&(0x7f0000003640)=""/85, 0x55}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/122, 0x7a}], 0x4}}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000005780)=""/119, 0x77}, {&(0x7f0000005800)=""/242, 0xf2}, {&(0x7f0000005900)=""/4096, 0x1000}], 0x3, &(0x7f0000006940)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000069c0)=@abs, 0x6e, &(0x7f0000007f80)=[{&(0x7f0000006a40)=""/149, 0x95}, {&(0x7f0000006b00)=""/74, 0x4a}, {&(0x7f0000006b80)=""/255, 0xff}, {&(0x7f0000006c80)=""/96, 0x60}, {&(0x7f0000006d00)=""/4096, 0x1000}, {&(0x7f0000007d00)=""/142, 0x8e}, {&(0x7f0000007dc0)=""/172, 0xac}, {&(0x7f0000007e80)=""/54, 0x36}, {&(0x7f0000007ec0)=""/137, 0x89}], 0x9, &(0x7f0000008040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000009240)=[{&(0x7f0000008080)=""/231, 0xe7}, {&(0x7f0000008180)=""/132, 0x84}, {&(0x7f0000008240)=""/4096, 0x1000}], 0x3, &(0x7f0000009280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x9, 0x40, &(0x7f0000009540)={0x0, 0x3938700})
accept$packet(r4, &(0x7f000000be40)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000be80)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f000000bec0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f000000bfc0)=0xe8)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f000000c100)={&(0x7f0000009580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f000000c0c0)={&(0x7f000000c000)={0xa8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
recvmmsg$unix(r2, &(0x7f000000dd00)=[{{0x0, 0x0, &(0x7f000000c240)=[{&(0x7f000000c140)=""/251, 0xfb}], 0x1}}, {{&(0x7f000000c280), 0x6e, &(0x7f000000c440)=[{&(0x7f000000c300)=""/22, 0x16}, {&(0x7f000000c340)=""/165, 0xa5}, {&(0x7f000000c400)=""/44, 0x2c}], 0x3, &(0x7f000000c480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f000000c5c0)=@abs, 0x6e, &(0x7f000000d8c0)=[{&(0x7f000000c640)=""/77, 0x4d}, {&(0x7f000000c6c0)=""/160, 0xa0}, {&(0x7f000000c780)=""/199, 0xc7}, {&(0x7f000000c880)=""/33, 0x21}, {&(0x7f000000c8c0)=""/4096, 0x1000}], 0x5}}, {{&(0x7f000000d940), 0x6e, &(0x7f000000dc00)=[{&(0x7f000000d9c0)=""/182, 0xb6}, {&(0x7f000000da80)=""/204, 0xcc}, {&(0x7f000000db80)=""/82, 0x52}], 0x3, &(0x7f000000dc40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r14=>0xffffffffffffffff]}}], 0xa0}}], 0x4, 0x40000000, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r13, &(0x7f000000df00)={&(0x7f000000de00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000dec0)={&(0x7f000000de40)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000)
r15 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_timeval(r15, 0x1, 0x43, &(0x7f000000df40), &(0x7f000000df80)=0x10)
socketpair(0xa, 0x4, 0x7bd, &(0x7f000000dfc0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = syz_genetlink_get_family_id$tipc2(&(0x7f000000e040), r10)
sendmsg$TIPC_NL_KEY_SET(r16, &(0x7f000000e140)={&(0x7f000000e000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000e100)={&(0x7f000000e080)={0x6c, r17, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80002)
getsockopt$sock_timeval(r14, 0x1, 0x42, &(0x7f000000e180), &(0x7f000000e1c0)=0x10)
getsockname$packet(r9, &(0x7f000000e200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000e240)=0x14)

[   70.899361] audit: type=1400 audit(1763206417.013:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:33:37 executing program 5:
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9220282bd929e285"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bc60bd39d981ed4da86fdd24c34080c3c32c124b0a9099ce"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ec941b31a657f390"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8c6a865e809187980fb9a9f975a29813a83c094db3a4dbc5c054ce89e09f4071"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="af21cd3fa71afd88b77654c9b9034416258b467c75a193caba6eb96882481a9f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d737bfffa1c88506d5b14c91c019bc50"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x39}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x1)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000280))
r0 = socket(0x5, 0x8080f, 0x7)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000a80)={&(0x7f0000000840), 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x150, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x10b, 0x2a, [@mesh_chsw={0x76, 0x6, {0x0, 0x8, 0x39, 0x7}}, @fast_bss_trans={0x37, 0xfa, {0x9, 0x8, "d04b21acadf231728d7f2f9cc059633b", "e12c39804b0414eb1b5681de58c6b0e594dc7d75dc56d77a6fc4d5f5926b2b21", "ee2d7fe942a1f66705b99c30006b80151c1bb21a9dae7f196a7180df06217b3c", [{0x4, 0x11, "ae4fdc8de672e059e917a9ab81754cdca1"}, {0x2, 0x27, "dfcad4b37a16622bb67aad3731d43f850144127606c7c3d0ce2131294ed00defdea83d6c4f2653"}, {0x1, 0xe, "d9f1ed5d45efd41a49481c27ae81"}, {0x2, 0x18, "2e61879ec784df417c3edbee10496efb696777952855a81e"}, {0x4, 0x8, "775a2deb29ab6468"}, {0x1, 0x18, "5fc556831f4107f60623ae01dd95e66346ee271624fe2a1c"}, {0x3, 0x9, "b2a52bd2309bfa758b"}, {0x4, 0x11, "d7a74ab6c1314bae55610f11432cfff21b"}]}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7ff}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x81, 0x70}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x150}, 0x1, 0x0, 0x0, 0x5}, 0x810)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x200448c0}, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2b7d47a548169f08}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x48}}, 0x44800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x11c, r3, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xb5, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0x1, @void, @void, @void}}, @measure_req={0x26, 0xa1, {0x1, 0x7, 0x8, "97f15f7d6cf7b99e943ac8f7eb4a6a371b5281ffd8f00725606f2500d06da561b650b2c4cf9eaad611a53cbf6002547dafc4ae5033e8fa5b5b67279030daccd4668076da25e5abdc674ad6c6ac7e97ffd6362e19114f89226a10ce090d0b4bba07ce2ea6a793070335fe7c26498e0a361142cb8da28bbd6a71374a12bcd1250ed53bf48c14f6e7525a5f664a4266e39033098277ab07f37a75b7b537dba2"}}, @cf={0x4, 0x6, {0x2, 0x1, 0x3ff, 0xa0c}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_IE={0x26, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0xb, @random="50c9009c817162326a497b"}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0xfc}}, @gcr_ga={0xbd, 0x6}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4800)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001000)={0x188, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="68b0c5aa669dbd5537a380a039ce9dabc26bb10ff3033c80"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cdba2672fa1fe3a938b4d2f74b6b95a5380f5d9e0c3d4825f3465312c2cf80f5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dde1c2f4ee76693f24841f3806d5ebd7012981162e8e15ba"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "317c2d5d95be8692"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="04f6329ca32b969440cd4ddbae89734f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1f}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "be08f48c6769578e"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x534}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "af228f1a66b8bda2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="159222e5f75e21215be5fe1aba1fa273"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="94ce9822b65e54f8119d6f59407dc8dc54aae9ac6874808e0e821e388838fddf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "420e445a0f43165e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8339d5c615edb0e7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="089f4fc61d6ceb4199c9babadef091574ebf1254fcbdadd2f538a4815a6de442"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28b789a16c0e6816"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="12f78b243ad9d0c27a0b8c7f05234787945373bb44db2142"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="73223f58cb857cda322729b8217ee79b"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001540)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000012c0)={0x224, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @empty, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x821}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc975}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x23, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}}}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "e86f5b0fd600e5eba027e353d8bb30f96ad3297e7ac7793b88c006"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6cec}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbd6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3b0e}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x61ca}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4080}, 0x40010)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001580))
r6 = socket(0x23, 0x6, 0x2a2)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004012}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r6)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x39e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x52f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8df}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x3c}}, 0x4)

[   72.095681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.099904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.102408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.106345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.110917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.221439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.223537] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.227215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.239540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.242555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.291387] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.294102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.297127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.301319] ==================================================================
[   72.302400] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0
[   72.303413] Read of size 2 at addr ffff88800db28cb8 by task kworker/u11:0/290
[   72.304770] 
[   72.306712] CPU: 1 UID: 0 PID: 290 Comm: kworker/u11:0 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) 
[   72.306742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[   72.306757] Workqueue: hci2 hci_cmd_work
[   72.306786] Call Trace:
[   72.306793]  <TASK>
[   72.306802]  dump_stack_lvl+0xca/0x120
[   72.306830]  print_report+0xcb/0x610
[   72.306857]  ? __virt_addr_valid+0x100/0x5d0
[   72.306882]  ? hci_cmd_work+0x66d/0x6d0
[   72.306909]  ? hci_cmd_work+0x66d/0x6d0
[   72.306936]  kasan_report+0xca/0x100
[   72.306963]  ? hci_cmd_work+0x66d/0x6d0
[   72.306993]  hci_cmd_work+0x66d/0x6d0
[   72.307021]  process_one_work+0x8e1/0x19c0
[   72.307057]  ? __pfx_process_one_work+0x10/0x10
[   72.307087]  ? move_linked_works+0x172/0x270
[   72.307111]  ? assign_work+0x196/0x240
[   72.307141]  worker_thread+0x67e/0xe90
[   72.307171]  ? trace_irq_enable.constprop.0+0xc2/0x100
[   72.307197]  ? __pfx_worker_thread+0x10/0x10
[   72.307227]  kthread+0x3c8/0x740
[   72.307254]  ? __pfx_kthread+0x10/0x10
[   72.307280]  ? ret_from_fork+0x79/0x7a0
[   72.307302]  ? lock_release+0xc8/0x290
[   72.307334]  ? __pfx_kthread+0x10/0x10
[   72.307361]  ret_from_fork+0x67a/0x7a0
[   72.307382]  ? __pfx_ret_from_fork+0x10/0x10
[   72.307404]  ? __switch_to+0x759/0x1060
[   72.307433]  ? __pfx_kthread+0x10/0x10
[   72.307460]  ret_from_fork_asm+0x1a/0x30
[   72.307495]  </TASK>
[   72.307502] 
[   72.329076] Allocated by task 293:
[   72.329586]  kasan_save_stack+0x24/0x50
[   72.330172]  kasan_save_track+0x14/0x30
[   72.330749]  __kasan_slab_alloc+0x59/0x70
[   72.331357]  kmem_cache_alloc_node_noprof+0x228/0x6b0
[   72.332101]  __alloc_skb+0x2ab/0x370
[   72.332658]  hci_cmd_sync_alloc+0x34/0x300
[   72.333277]  __hci_cmd_sync_sk+0xf7/0x5c0
[   72.333887]  hci_read_dev_class_sync+0x2c/0x170
[   72.334570]  hci_dev_open_sync+0x1874/0x1f60
[   72.335207]  hci_power_on+0xdb/0x5d0
[   72.335759]  process_one_work+0x8e1/0x19c0
[   72.336387]  worker_thread+0x67e/0xe90
[   72.336960]  kthread+0x3c8/0x740
[   72.337466]  ret_from_fork+0x67a/0x7a0
[   72.338031]  ret_from_fork_asm+0x1a/0x30
[   72.338620] 
[   72.338871] Freed by task 301:
[   72.339343]  kasan_save_stack+0x24/0x50
[   72.339917]  kasan_save_track+0x14/0x30
[   72.340497]  kasan_save_free_info+0x3a/0x60
[   72.341234]  __kasan_slab_free+0x43/0x70
[   72.341944]  kmem_cache_free+0x26f/0x500
[   72.342650]  kfree_skbmem+0x18a/0x1f0
[   72.343338]  sk_skb_reason_drop+0x10e/0x1b0
[   72.344091]  vhci_read+0x3d5/0x5d0
[   72.344725]  vfs_read+0x1eb/0xc70
[   72.345348]  ksys_read+0x121/0x240
[   72.345974]  do_syscall_64+0xbf/0x430
[   72.346651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.347556] 
[   72.347854] The buggy address belongs to the object at ffff88800db28c80
[   72.347854]  which belongs to the cache skbuff_head_cache of size 232
[   72.350080] The buggy address is located 56 bytes inside of
[   72.350080]  freed 232-byte region [ffff88800db28c80, ffff88800db28d68)
[   72.352132] 
[   72.352446] The buggy address belongs to the physical page:
[   72.353419] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xdb28
[   72.354746] flags: 0x100000000000000(node=0|zone=1)
[   72.355615] page_type: f5(slab)
[   72.356195] raw: 0100000000000000 ffff8880096c78c0 dead000000000122 0000000000000000
[   72.357528] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000
[   72.358842] page dumped because: kasan: bad access detected
[   72.359784] 
[   72.360083] Memory state around the buggy address:
[   72.360916]  ffff88800db28b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.362156]  ffff88800db28c00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[   72.363384] >ffff88800db28c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   72.364616]                                         ^
[   72.365488]  ffff88800db28d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[   72.366713]  ffff88800db28d80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[   72.367942] ==================================================================
[   72.369349] Disabling lock debugging due to kernel taint
[   72.370458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.405542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.413053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   72.414241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   72.417481] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   72.418588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   72.419634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   72.424233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   72.426750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.427993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.430583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.432503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.434049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.443906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   72.449034] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   72.453932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   72.456033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   72.457276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   72.470074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   72.470132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   72.473203] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   72.476570] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   72.477848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   72.478140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   72.481009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   72.492014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   72.493298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   74.125803] Bluetooth: hci0: command tx timeout
[   74.320753] Bluetooth: hci1: command tx timeout
[   74.447865] Bluetooth: hci2: command tx timeout
[   74.447887] Bluetooth: hci3: command tx timeout
[   74.509940] Bluetooth: hci4: command tx timeout
[   74.510000] Bluetooth: hci6: command tx timeout
[   74.510706] Bluetooth: hci7: command tx timeout
[   74.574803] Bluetooth: hci5: command tx timeout
[   76.174467] Bluetooth: hci0: command tx timeout
[   76.365830] Bluetooth: hci1: command tx timeout
[   76.493761] Bluetooth: hci3: command tx timeout
[   76.494215] Bluetooth: hci2: command tx timeout
[   76.558770] Bluetooth: hci4: command tx timeout
[   76.559206] Bluetooth: hci6: command tx timeout
[   76.559578] Bluetooth: hci7: command tx timeout
[   76.621743] Bluetooth: hci5: command tx timeout
[   78.221766] Bluetooth: hci0: command tx timeout
[   78.413797] Bluetooth: hci1: command tx timeout
[   78.541783] Bluetooth: hci3: command tx timeout
[   78.542200] Bluetooth: hci2: command tx timeout
[   78.605943] Bluetooth: hci7: command tx timeout
[   78.606654] Bluetooth: hci6: command tx timeout
[   78.607438] Bluetooth: hci4: command tx timeout
[   78.669835] Bluetooth: hci5: command tx timeout
[   80.269788] Bluetooth: hci0: command tx timeout
[   80.461786] Bluetooth: hci1: command tx timeout
[   80.589772] Bluetooth: hci2: command tx timeout
[   80.590200] Bluetooth: hci3: command tx timeout
[   80.653787] Bluetooth: hci6: command tx timeout
[   80.654232] Bluetooth: hci7: command tx timeout
[   80.654584] Bluetooth: hci4: command tx timeout
[   80.717842] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
11:33:38  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff888016e0f4a8 RCX=0000000000000001 RDX=1ffff11002dc1e82
RSI=ffff888016e0f498 RDI=ffff888016e0f410 RBP=ffff888016e08000 RSP=ffff888016e0f340
R8 =0000000000000001 R9 =ffff888016e0f440 R10=000000000003ca6e R11=000000000000454a
R12=ffff888016e0f460 R13=ffff888016e0f448 R14=ffff888016e0f498 R15=ffff888016e0f400
RIP=ffffffff81360b9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e538f000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc1a681e260 CR3=000000001d726000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e646f6d6b62696c2f756e672d78
XMM02=00322e6f732e646f6d6b62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff8880162a7618
R8 =0000000000000000 R9 =ffffed1001580046 R10=000000000000006e R11=000000003a555043
R12=000000000000006e R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0
RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e548f000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca779d01f0 CR3=000000001d71b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000