Warning: Permanently added '[localhost]:9683' (ECDSA) to the list of known hosts. 2025/11/14 09:42:29 fuzzer started 2025/11/14 09:42:29 dialing manager at localhost:37161 syzkaller login: [ 52.319412] cgroup: Unknown subsys name 'net' [ 52.382669] cgroup: Unknown subsys name 'cpuset' [ 52.405543] cgroup: Unknown subsys name 'rlimit' 2025/11/14 09:42:40 syscalls: 206 2025/11/14 09:42:40 code coverage: enabled 2025/11/14 09:42:40 comparison tracing: enabled 2025/11/14 09:42:40 extra coverage: enabled 2025/11/14 09:42:40 setuid sandbox: enabled 2025/11/14 09:42:40 namespace sandbox: enabled 2025/11/14 09:42:40 Android sandbox: enabled 2025/11/14 09:42:40 fault injection: enabled 2025/11/14 09:42:40 leak checking: enabled 2025/11/14 09:42:40 net packet injection: enabled 2025/11/14 09:42:40 net device setup: enabled 2025/11/14 09:42:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/14 09:42:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/14 09:42:40 USB emulation: enabled 2025/11/14 09:42:40 hci packet injection: enabled 2025/11/14 09:42:40 wifi device emulation: enabled 2025/11/14 09:42:40 802.15.4 emulation: enabled 2025/11/14 09:42:40 fetching corpus: 0, signal 0/0 (executing program) 2025/11/14 09:42:42 starting 8 fuzzer processes 09:42:42 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7c}}, './file1\x00'}) r3 = syz_io_uring_complete(0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4090) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x24, 0x81, 0x282, 0x0, 0x3, 0xffff, 0x34d, 0x4, 0x100, 0x1f, 0x0, 0x5fa8, 0x5, 0x200, 0xfbff]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x3, 0x6, 0x0, {0x6, 0x1fad, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x54525642, 0x3}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0xfff9, 0x0, 0x0, 0x32f}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x0, 0x7, 0x0, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x1ff, 0x37}}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x8ae}}, './file0\x00'}) r6 = io_uring_setup(0x39c9, &(0x7f0000000380)={0x0, 0xe120, 0x4, 0x3, 0x72, 0x0, r5}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaa6, 0x62}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf4}, @NL80211_ATTR_BANDS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r7, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1b}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x64}, 0x1, 0x0, 0x0, 0xcb8cd0fc0a71751a}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r4) sendmsg$NL80211_CMD_GET_INTERFACE(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r7, 0xe, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$RTC_VL_CLR(r1, 0x7014) ioctl$AUTOFS_DEV_IOCTL_READY(r10, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 09:42:42 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x8000000, 0x8001, 0x1, 0x80000000, 0x5, 0x5, 0x8000000, 0xa76, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x465}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1cd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffb4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xefe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x4a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x5, 0x1}, {0x18}, {0x2}, {0xc}, {0x1a}, {0x6c}, {0x16, 0x1}, {0x5, 0x1}, {0x16, 0x1}, {0x1}, {0x5, 0x1}, {}, {0xc}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xffff}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x395}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000e00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000640)={0x764, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0xffff}}}}, [@NL80211_ATTR_TID_CONFIG={0x23c, 0x11d, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x60, 0x48, 0x6, 0x3, 0xb, 0xc, 0x6, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x5, 0x8, 0x4, 0x3, 0x9, 0x2, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x9}, {0x6, 0x8}, {0x3, 0x9}, {0x5, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {0x5, 0x8}, {0x3, 0x1}, {0x2, 0x5}, {0x6, 0x6}, {0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x9, 0xea, 0x4, 0x1, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x1b, 0x6c, 0xb, 0x18, 0x3, 0x1, 0x48, 0x16, 0x9, 0x9, 0xb, 0xb, 0x13, 0xc, 0x2, 0x48, 0x60, 0x48, 0x24, 0x48, 0x12, 0x6c, 0x48, 0x16, 0x6c, 0x5, 0x6c, 0x4, 0x1, 0x60, 0xc]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x6}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x1}, {0x0, 0x1b}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x8}, {0x3}, {0x1, 0x7}, {0x3, 0x5}, {0x2}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x5, 0x8}, {0x4, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x6c, 0x16, 0x18, 0x5, 0x12, 0x2, 0x5, 0x36, 0x2]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7}, {0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x6}, {0x6, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x785}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x62}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfe}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_TID_CONFIG={0x500, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9304}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x474, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x458, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x92c, 0xff16, 0x7f, 0x0, 0x3, 0x7e60, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x48, 0x30, 0xc, 0x18, 0x6, 0x6c, 0x48, 0x48, 0x1, 0x30, 0x16, 0x9, 0x60, 0x18, 0x5, 0x12, 0x16, 0x4, 0xc, 0x18, 0x3, 0x1b, 0x1b]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x30, 0x6c, 0xb, 0xc, 0x1, 0x1b, 0xb, 0x6c, 0x60, 0x9, 0x16, 0xc, 0x60, 0x6c, 0x0, 0x9, 0xc, 0x1b, 0x60]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x2}, {0x5}, {0x5, 0x6}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x6}, {0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x6}, {0x2, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x6165, 0x0, 0x8000, 0x1f3, 0x40, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x60, 0x3, 0x18, 0x16, 0xb, 0x5, 0xc, 0x50, 0x48, 0x7e, 0x5, 0x6c, 0x4, 0x36, 0x1, 0x6c, 0x3, 0x4, 0x6c, 0x30, 0x60, 0x4, 0x36, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x18, 0x2, 0x1b, 0xb, 0xb, 0xb, 0x1, 0xb, 0x1b, 0x2, 0x0, 0x5, 0x36, 0x30, 0x3, 0x18, 0xb, 0x12, 0x2, 0x6c, 0x48, 0x2, 0x1b, 0x3, 0x16, 0x2, 0x60, 0x60, 0x60, 0x4, 0x9]}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xa6ddcfa9dbc521a0, 0x1, 0x6, 0x16, 0x5, 0x18, 0x48, 0x3, 0x9, 0x1, 0x6, 0x5, 0x5, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x24, 0x1, 0x16, 0x1, 0x16, 0x1b, 0x3, 0x2]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x5}, {0x4, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0xa}, {0x6}, {0x7, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {}, {0x6, 0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x6}, {0x2, 0x9}, {0x7, 0x9}, {0x4, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x4, 0x1, 0x3, 0x6, 0x18, 0x16, 0xb, 0x48, 0x24, 0x6c, 0x16, 0x6c, 0x16, 0x4, 0x6c, 0x4c, 0x4, 0x30]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x12, 0x2, 0x2, 0x0, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3ff, 0x1, 0x2, 0xd0fc, 0x5, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x1ff, 0x9, 0x1, 0x1, 0x81a7, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x7, 0x2}, {}, {0x4, 0x9}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x5, 0x5}, {0x3, 0x2}, {0x1}, {0x2}, {0x1, 0x3}, {0x4}, {0x3, 0xa}, {0x4, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x5}, {0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0xa}, {0x4, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0x4}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x4, 0x5}, {0x2}, {0x5, 0x5}, {0x5, 0x8}, {0x3}, {0x6, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x5, 0x9}, {0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x30, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xd, 0x2, 0x48, 0x1b, 0x18, 0xab3064706d535487, 0x16, 0xc, 0x12, 0x1b, 0xa05cb7f1a8d2e492, 0x48, 0x1, 0x36, 0x9, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc7b, 0x8001, 0x8, 0x1000, 0xfff, 0x4, 0x7, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x9, 0x84d, 0x5, 0x6, 0x101, 0x7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0xc, 0x7e, 0x0, 0x48, 0x4, 0x4]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x200, 0x8, 0x3, 0x9, 0x4, 0x8, 0x94d]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a24, 0xff, 0xfff, 0x6, 0x9, 0x1, 0xff, 0x7]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0xa}, {0x1, 0x7}, {0x6, 0x8}, {0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x40, 0x8000, 0x1000, 0x3ff, 0x99]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x9}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x3}, {0x6, 0x9}, {0x4, 0xa}, {0x2, 0xa}, {0x2, 0x5}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x3}, {0x6, 0x4}, {0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {}, {0x2}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x91, 0x0, 0x401, 0x1, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x16, 0x48, 0xb, 0xb]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {0x6, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x1d}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x3, 0x2}, {}, {0x4, 0x9}, {0x7, 0x9}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0x2}, {0x1}, {0x7}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xf4, 0x2, 0x3, 0x6]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x36, 0x3, 0x48]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x1}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x7, 0xa}, {0x3, 0xa}, {0x5, 0x5}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {}, {0x3, 0x8}, {0x4, 0x3}, {}, {0x7, 0xd}, {0x6, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x5}, {0x2}, {0x1, 0x5}, {0x1, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x2}, {0x7, 0x8}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x10}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x7}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {0x1, 0x2}, {0x6, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x5}, {0x2, 0x3}, {0x6, 0xa}, {0x6, 0x1f}, {0x0, 0x5}, {0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x2}, {0x1, 0x5}, {0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x5, 0x9}, {0x1, 0x9}, {0x5, 0x9}, {0x5, 0xa}, {0x2, 0x6}, {0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x7}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x8, 0x1, 0x1, 0x9, 0x12, 0xb, 0x4, 0xc, 0x57, 0x16, 0x5, 0x18, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x6f0, 0x3f, 0x1, 0x100, 0x1, 0x0, 0x3aef]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}]}, 0x764}, 0x1, 0x0, 0x0, 0x10800}, 0x4004000) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x54050088}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) clone3(&(0x7f00000010c0)={0x40200, &(0x7f0000000f40)=0xffffffffffffffff, &(0x7f0000000f80), &(0x7f0000000fc0), {0x16}, &(0x7f0000001000)=""/21, 0x15, &(0x7f0000001040)=""/4, &(0x7f0000001080)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001140)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4110000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xf}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r6) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r4) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r8, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040850}, 0xc000) openat$full(0xffffffffffffff9c, &(0x7f0000001500), 0x82200, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) 09:42:42 executing program 5: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x114, &(0x7f0000000000)=0x401, 0x0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) r5 = syz_io_uring_setup(0x5129, &(0x7f00000000c0)={0x0, 0x2931, 0x20, 0x0, 0x29a, 0x0, r4}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000002, 0x80010, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = syz_io_uring_setup(0x597d, &(0x7f0000000200)={0x0, 0x39db, 0x1, 0x3, 0x130, 0x0, r4}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r2}}, './file0\x00'}) ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000000340)=""/113) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x7}}, './file0\x00'}) r12 = io_uring_setup(0x64ed, &(0x7f0000000400)={0x0, 0xa14, 0x0, 0x3, 0x25b}) syz_io_uring_submit(r6, r9, &(0x7f0000001600)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r12, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/210, 0xd2}], 0x3, 0x9, 0x1}, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, r5, {0x4af}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$EVIOCGKEYCODE_V2(r11, 0x80284504, &(0x7f0000001780)=""/19) r13 = syz_io_uring_setup(0x7e66, &(0x7f00000017c0)={0x0, 0xb5e4, 0x1, 0x2, 0x26b, 0x0, r8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000001840), &(0x7f0000001880)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x80010, r13, 0x10000000) 09:42:42 executing program 2: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@can={0xc, {{0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "61f72ced6462b462"}}}}, 0x0) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1a, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40810) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044}, 0x20000001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x1c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r2) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CALIPSO\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1880}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x800000d}, 0x80) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x4010) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000840}, 0x2000c882) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x0, 0x144, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x4800) 09:42:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x37}, @NL80211_ATTR_IE={0x23, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x9, 0x3}}, @mic={0x8c, 0x18, {0xabd, "ca86b197575a", @long="b9b05a993bd2838420914a54b7780741"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x27, 0x2a, [@measure_req={0x26, 0x21, {0x40, 0x9, 0x20, "394ddb2c69d987772c0913be1605b6ae96b9f2d8ed982eac3bb8b19c78db"}}]}, @NL80211_ATTR_IE={0x3b, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x1f, @not_ext={{}, 0x7, 0x81, @device_a, 0x200000, "", 0x7, 0x4, @device_b, 0x2}}, @gcr_ga={0xbd, 0x6}, @chsw_timing={0x68, 0x4, {0x7206, 0xfffd}}]}, @NL80211_ATTR_IE={0x6f, 0x2a, [@perr={0x84, 0x69, {0x8, 0x7, [@ext={{}, @broadcast, 0x0, @device_b, 0x37}, @not_ext={{}, @device_b, 0x9, "", 0x18}, @not_ext={{}, @broadcast, 0xffff, "", 0x20}, @not_ext={{}, @device_b, 0x4, "", 0x42}, @ext={{}, @device_a, 0x2f000, @device_b, 0x33}, @not_ext={{}, @device_b, 0x0, "", 0x37}, @not_ext={{}, @broadcast, 0x7fffffff, "", 0x2}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x7, [{0x36}, {0x3}, {0x12, 0x1}, {0x36, 0x1}, {0x24}, {0xc, 0x1}, {0x1}]}]}, @NL80211_ATTR_SSID={0x8, 0x34, @random="43101e82"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000}, 0x4000000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x402000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x4, 0x40}}, './file0\x00'}) socketpair(0x3, 0x80000, 0x6, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "e4add2ce026cd79024b32c6d07279d0d"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x4004051) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r8, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x91, 0xc}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xc0020012}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x18}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x850) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2cdc874d3fbc9e60}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000408c}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file1\x00'}) r11 = perf_event_open(&(0x7f0000000a40)={0x0, 0x80, 0x6, 0x0, 0x2, 0x4, 0x0, 0x3, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000a00), 0x2}, 0x1, 0xb3, 0x400, 0x9, 0x6, 0xfe5, 0x8001, 0x0, 0x279b, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r11, {0x4c}}, './file0\x00'}) 09:42:42 executing program 3: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/74) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x4, 0xc03a, {{0x1b, 0x4, 0x3, 0x9, 0x6c, 0x67, 0x0, 0x8d, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x36, [@loopback, @local, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x44, 0x98, 0x1, 0x0, [{@loopback, 0xfffffff9}, {@rand_addr=0x64010101, 0xa6}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x1000}, {@multicast1, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb7}, {@private=0xa010100, 0xbfe7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x7800, 0x700, 0x1, 0x8, {{0x1e, 0x4, 0x2, 0x8, 0x78, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@lsrr={0x83, 0x13, 0x82, [@remote, @loopback, @private=0xa010102, @rand_addr=0x64010100]}, @generic={0x0, 0xb, "b894ffb1003f589ae6"}, @timestamp_prespec={0x44, 0x2c, 0x2e, 0x3, 0x2, [{@remote, 0x3}, {@private=0xa010102, 0x7}, {@remote, 0x5}, {@loopback, 0xff}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x21a}]}, @ssrr={0x89, 0x7, 0xa7, [@dev={0xac, 0x14, 0x14, 0x40}]}, @noop, @timestamp={0x44, 0x10, 0x33, 0x0, 0xb, [0x6, 0x1ff, 0x46f4]}]}}}}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x2004c880) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', r1, 0x7800, 0x40, 0x3e10, 0x3, {{0x3e, 0x4, 0x3, 0x3, 0xf8, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, {[@end, @timestamp_addr={0x44, 0x3c, 0x2d, 0x1, 0x0, [{@broadcast, 0x9}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1066}, {@multicast2, 0x7fffffff}, {@private=0xa010100, 0x2}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x97, 0x1, 0x6, [{@local, 0x4}]}, @generic={0x84, 0xd, "1dba49d1225762569efd12"}, @timestamp_prespec={0x44, 0x4c, 0xd2, 0x3, 0x2, [{@multicast1, 0xfffffffc}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x8}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010101, 0x7}, {@remote}, {@loopback}, {@rand_addr=0x64010102, 0x8}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x1, [{@private=0xa010102, 0xffffffe2}, {@remote, 0x9}]}, @timestamp={0x44, 0x8, 0x30, 0x0, 0xc, [0x1f]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x43, [@remote, @multicast2, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000580)=0x80, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0xc0800, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', r2, 0x2f, 0x44, 0x5, 0x8, 0x8, @mcast1, @local, 0x80, 0x8000, 0x0, 0xffffff81}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000780)={'gre0\x00', r7, 0xff67, 0x1, 0x9a55, 0x4aa, {{0x1d, 0x4, 0x3, 0x34, 0x74, 0x0, 0x0, 0x8, 0x29, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x2c, 0xf9, 0x1, 0x5, [{@loopback, 0x9}, {@multicast2, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x80000000}, {@multicast2, 0xf}, {@private=0xa010100, 0x80000000}]}, @generic={0x0, 0xb, "2735b42f2b88a95756"}, @generic={0x86, 0x2}, @lsrr={0x83, 0x23, 0x20, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}, @multicast1, @remote, @private=0xa010101]}, @generic={0x83, 0x4, "5ccd"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000880)={'ip_vti0\x00', r2, 0x20, 0x8000, 0x6, 0x7, {{0x11, 0x4, 0x1, 0x3, 0x44, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0x5, [{@local}, {@rand_addr=0x64010102, 0xfe6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}, {@multicast2, 0x3}, {@remote, 0x4}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000940)={'erspan0\x00', r8, 0x80, 0x10, 0x7fff, 0x2000000, {{0x21, 0x4, 0x0, 0x30, 0x84, 0x67, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0xf, 0xdc, [@broadcast, @remote, @multicast2]}, @generic={0x86, 0x4, "1d28"}, @ssrr={0x89, 0xb, 0xc7, [@remote, @rand_addr=0x64010102]}, @noop, @ssrr={0x89, 0x1f, 0x49, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @loopback, @broadcast]}, @generic={0x94, 0x10, "edf9160ac33f3f5933b6011f9266"}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "bb261fca00f1"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x2, [{0x1, 0x8, "ef66d57e12c4"}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x440c1) ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f0000000b40)) syz_extract_tcp_res$synack(&(0x7f0000000b80), 0x1, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000bc0)=""/213) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3b}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x24, 0x2a, [@peer_mgmt={0x75, 0x8, {0x1, 0x7, @val=0x1f, @val=0x26, @void}}, @mesh_chsw={0x76, 0x6, {0x9, 0x1, 0x2c, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xf7, 0x64, 0x7}}, @peer_mgmt={0x75, 0x6, {0x0, 0x5, @void, @val=0x41, @void}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x50}}, 0x20044800) 09:42:42 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdf}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}]}, 0x5c}}, 0x40) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0xc4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) ioctl$RTC_PIE_OFF(r0, 0x7006) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) r4 = openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0xc202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6be0, 0x8}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1ff, 0x7c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0091}, 0x28040004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x7f}}, './file0/file0\x00'}) epoll_wait(r9, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x5, 0x100) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x60005) 09:42:42 executing program 6: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000040)={0xfd8, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0xe4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd0, 0xe, 0x0, 0x1, [{0xcb, 0x0, "d165de267351dd5a7b8c0df87258a2be97af0e3243638fbb67afe5321235b74f1c614c41fa08b1340706fd6fca525f81eb65cc0bae722636ac0a3efd6bf4368285165dc1fa1f66f7d5f46a2acec385dd57c84690eaa1a59dd4b1a28ffb070104041ee857b70db84f441fd74654b6dcfe125ca069a7965fc20bcab40001b2ce674c31f1889ab016f2f99791e3530c7fde2ae6c992acfb77e6335c5bdd95a43f76d8dbfcc6e860008d7cc76b308cb3b20c669468104038d762174df9b72a3bfd7256de659f40baa0"}]}]}, @NL80211_ATTR_NAN_FUNC={0x568, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x6b, 0xb, "2a0c2a0f6e22ff0777c6d4b7b2feb82d1e66cb12e93000f0ccd32ce484dc3494229751ea7727a7cf650e6efa68a96f0c11bc04173951f6740efc1f6e376a283a215119c9c399bfeb26b5b43913a613cee47ae3dd99c823c828d9927ba2920ebeb6744e2e74611a"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x11c, 0xd, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0x17, 0x0, "c231a647b2108b5eb92e4f5a80f212f5126e1d"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x238, 0xe, 0x0, 0x1, [{0xd6, 0x0, "3280e48d07159af19c7ddee2d73398cb08b3391f333cc53c8d55993b1bb26cdaf9617ce6eba5835476d78036e60a6c9600564f3d85e2181456b4ee14622674a5afb3a5ab6a41ae3b66646e5af1b563b59505013f26d34581afde6ea73e943098da7ac2e644fa2d5f93b4114ecccda84c28518384695fecafc4b6c736de6a7d4cce146d9bc8b271f59b52c0298438530f3f73dd61c5ec6f690d64b5ee2603bdaa6d3c4cdf9ea74b15e09cf199ab1c2678470fabc6b146324b19f3593ef85129f0a9ad5f077d3a3b872b7ffc13e946c198a53b"}, {0x48, 0x0, "c2d526c5aa949ae687039d82c318e00b8095eed232381d9d9c5155644856543d999d88b20588945dc87b5bbc651e7fda88e534efca002bdab64069ea0cc82966b4ba6017"}, {0x50, 0x0, "041b5a4dee18b6a919271ebd03448cff569bf38aa5a119d183ea399a2e9f2b1aadec511ce3f96229daea5e740976c0457b0a7657b6a0767c3316296c3a6da0b5a2733e35542e5a951e7b2fcf"}, {0x4b, 0x0, "b5b7f54461c5faa0cb2f2784e048e83fa3db463687dfad32ae4b2925a7c268aaea930da4674424c067496f8a35c93b2827e2a3eff8572e016d4e9343c0cbdcccebd9b0ad3b2f36"}, {0x76, 0x0, "91f8450a42df5a9c6d1151816c7eb83c66f55694b2ca16008da232ec776e902781ad59794118a98b2052e20c93c014b533a18e6bd2faf138caa95a78766fb25b3e0dcfe278c6f0d99c83890c6c0c6bb030f00089a73442a2cd36e42ebf73834c3b2f4274e845814560ee1e5765ed3abe814a"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4f, 0xb, "4c6f6e8773b15d866a5d2531ed542a5de1a367e988201e2da2febf3a67c75ec8ae777b52a048f3c660987e6c519113fa11f9019fd339a969db9272711a6be7ebb8b64a8220729b8ec49ca2"}, @NL80211_NAN_FUNC_SRF={0x148, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x5f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x5ec, 0xe, 0x0, 0x1, [{0xa7, 0x0, "8cd27f60bb38d0ca98833c3ec823caa0a05c0f84167f70d53b8e1bac011422031dc572d3fed0993650845373c804e5225daefe0ef3fa0d9643a4cf1d2a2892b6b914affa92d5ee2a8bcc9555c5a7e34faaf9a5695ed4c7bb52b75e7783acc7c7c097bee9dbe6475e6909fa1ee76bb230b44c78feaf3f1f1042d8d2bcf9de77664e17953b91aa956c2e560530c6b5753374206b440be8a6599ca719d0d9e699f4f27c7a"}, {0xfc, 0x0, "935fbe7b975ceb47db42af2ca9ea75f91f6b063bc5b4d66fca72a232b2c096f05db2614b6d48495bf04dc9e01c2327e40fd17e78fd2e406ca63294a7802f99def61bca72a5b8d67c39c7334fe52c21e94025983ce76c6d04a6291410139d30d8c9e8bbb43acfe16f0c6864f2d2d5a3b8b6503987c1e996652f64f8b21ede36aca75c8f32def28c6c42aca6d3fb4c6cd098704601c36351573dad44fc5d469eb82072660a421813f1f7e47bb871c84ff537fae1227d390089a739cbc3153a6f8aa6d63492519e8ae85e4e5f08a364031d66b3ac5741a11d779ab69b0bc721c25c96ef78c585746f6433a5ba73d18c34f4b4f0d8eb48399384"}, {0xe1, 0x0, "8fc8305007b8349f5b9deed481bbf21198389a74f909c338707c85f6c3f161a9873fd65d4a3d6305d288aced5c772c763ce3593579c2e31f115197cc4320e7dd1b47578e2c502603223d431f92e54821efb68b910602f66eec0972f623cf508efa1ccd7cf89d10e315c2f761579675b8e6a37c4cda9883b4c2ef1f33d091e57dfa9929c7bfc5f415cf095f9cb1b33af6d37770d3b317bfe83cfeb1a1d2576b2d87c5e2f158051226d4431ad3d054909b22157579d30d63b209bb9fc4764437f04292e7787339aa4648daa0e6b6bde2428510aa18c28336a674a1a7aed0"}, {0x9f, 0x0, "53a1b927755b27c47b2699c48e06d5b70601650ca3ee172a2979e2a04d49bfb6bfc14a469d932c893d7ea49630d9a54a1ae8ae7e3be066225e86936a96d858f6a2a36f18f12feaa031d16ec2a0a1c89882ae300637427c39d6c3839708d60ca912b03aaa88989545c6b838882bd08474e4ffa7fd2a0d9d1730bf9a6d71981ee74aea508299535a34e4b5a550793a03f33b39823463c5ba858c6903"}, {0xda, 0x0, "002fad2505cbfd1ddf6cfdb1ae08a4dea8fb4638c222563baf913058346a8fb16e8b9d25bc77bfb83779d5223d974f7005078995ed7e94d8e943e8e0682ecbfbde5d358848329478c8082869160c94fa4938b2fafa93dcad0905df68dcc07932b807a8f5612832e0e35354a41daa450c33c4e8bbebd8ac7e02286a9522d4a58dd778676f4fbc0109210df59a121698b5edb9a26cc4d693b530764a67ac6b4930f1f11d40d0da6a4f80ace59b0dfbdc765c5550c759934c623be76c7a8ac163252e7127f58babb2e06c7c7ef669950a005e038926f3c2"}, {0x8e, 0x0, "3d66bb98b4c4ecb7db9c85ab8bebb27b8c7f0ad1b85c44f414ba0acfdf2aa8a707f9017ada518677e63a354d6772e8e130ff8519a80b7af19145171d95e9238de58ec950fc6dd54b6d3be560995b4276787923201b43758d9494a98132af5a4825b137b41cecfea59a7802418b3941da5d984ed24847b9f5b83c0a22b4ac999a0ee611a5bdc208fda610"}, {0xbe, 0x0, "b91a5faf37e9056b1e67dd9d27e481b6abc0d2a46f28fe8ccafae2bf1bc752d27dfb3144ea1a07ab86ca225877a1ce98512c8b54a8802e61f34cb20cb0349ce7342ca9327bf348b37453e7447b12fe51ce43744a962f17167dc5228057c788d4acfa815f796a26947ecae3a3d6db594e1dcc3f284bc9c2a84926b91f4b6997e88abb160b05b39c726bf3bb03a709117e1d1265d800735ccc5ce543a5ab01b0996a47a8c299fc88818dae28b66e242af580e9070b2f2b5946247a"}, {0x51, 0x0, "21abb8b5123d34fc14d2757bd9fc9159f5afe811980a6a0593f727e7eedd65e854aac260b52bf0566f3309603387cef53dca2293e724d377f5dffb8439270221aa4a48168bf04eb80940c0c966"}, {0x17, 0x0, "ed84ef61a575a390dadf9d565e5d56d9e85721"}, {0x25, 0x0, "b7797698050b3bb2e52afc3fc8773c33cffdb7d03fa9f70168381f4ff1b9e15cee"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0xd8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xc0, 0xd, 0x0, 0x1, [{0x5d, 0x0, "f0f26acecf26ed51e28e03cd87e5adf8e94ee930e2d8de398365140dfd4cd57cdfe24f36265f3bf7a5b9b33bcd265328b6f71a2b0d414e5dc9ac93b5798f07e7e91d13f5090ce8c86eaf77195ada97dba1a9ebe97f120c8d2e"}, {0x59, 0x0, "f4a0d7d75e12744ec70120b4ef6ffa2664e743d5812ff2e25167affaa7b232b7ce080d8f5ba4c3db8f7c76cd556d3ead9af9b7d66ecaa8ac8f304d69862412a1cf1125ae8fd91167885d2304777ca52900618e44f3"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x28c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_SRF={0x54, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xf9}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x21c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "1a0d9b7f49395179843b8e76a47165744672b636d0578fbc9618955583760e5dec7a5bbc31b6f129be762b12cadbcf357808253688be8c896292751d790263748ba7ab72a230766561e7e707f256ad330be0ea57ddb97fa178d604675dd817fe047c7d24add2c5ef37c075d6d7d8e87672e3affe6f851d33d16745eb4e9b8471f67af256a2ba5a573e2c04251c0f1037122a1f1361c5b8596368dd3f4bfc9571a7df83cd4089f71011082b3258d0bc7c616879a901228c27238c1b74692c961b3b7751d4bfca987f87e1199e22c9810c2ff43724ca025bfceff96aeaa6d312de7875742bc0bfa28dde5218985382b8312f3856ddf63e2f7293a3b394d47d12"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7f}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0xfd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x80000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001240)={&(0x7f0000001100), 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) openat$cgroup_procs(r0, &(0x7f0000001280)='tasks\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x852, 0x6f}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xc0, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2f1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x302}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x10000000) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x64, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xc6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x20000080) clone3(&(0x7f0000002bc0)={0x90900100, &(0x7f0000002980), &(0x7f00000029c0)=0x0, &(0x7f0000002a00), {0x17}, &(0x7f0000002a40)=""/240, 0xf0, &(0x7f0000002b40)=""/47, &(0x7f0000002b80), 0x0, {r0}}, 0x58) r6 = fork() clone3(&(0x7f0000002f00)={0x800000, &(0x7f0000002c40), &(0x7f0000002c80), &(0x7f0000002cc0)=0x0, {0x3b}, &(0x7f0000002d00)=""/218, 0xda, &(0x7f0000002e00)=""/148, &(0x7f0000002ec0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r0}}, 0x58) clone3(&(0x7f0000002fc0)={0xde4de9b46438d64a, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0), {0x17}, &(0x7f0000001900)=""/65, 0x41, &(0x7f0000001980)=""/4096, &(0x7f0000002f80)=[r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003140)={&(0x7f0000003080)={0x88, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x890}, 0x30040000) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000031c0), 0xa0000, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000003200)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) [ 63.770717] audit: type=1400 audit(1763113362.490:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 64.894465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.897475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.899404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.907694] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.910681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.960665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.964739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.966692] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.976532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.978870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.085625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.088079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.090734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.096744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.102833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.146388] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.152393] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.164028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.172379] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.174434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.174488] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.177449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.179909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.185368] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.188537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.188734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.195274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.196484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.198001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.200216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.214717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.216024] ================================================================== [ 65.216227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.217104] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 65.218970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.218988] Read of size 2 at addr ffff88800de492b8 by task kworker/u11:5/309 [ 65.220741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.223019] [ 65.223035] CPU: 0 UID: 0 PID: 309 Comm: kworker/u11:5 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 65.223064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 65.223079] Workqueue: hci5 hci_cmd_work [ 65.223108] Call Trace: [ 65.223115] [ 65.223123] dump_stack_lvl+0xca/0x120 [ 65.223151] print_report+0xcb/0x610 [ 65.223178] ? __virt_addr_valid+0x100/0x5d0 [ 65.223203] ? hci_cmd_work+0x66d/0x6d0 [ 65.223229] ? hci_cmd_work+0x66d/0x6d0 [ 65.223255] kasan_report+0xca/0x100 [ 65.223281] ? hci_cmd_work+0x66d/0x6d0 [ 65.223311] hci_cmd_work+0x66d/0x6d0 [ 65.223338] process_one_work+0x8e1/0x19c0 [ 65.223374] ? __pfx_process_one_work+0x10/0x10 [ 65.223403] ? move_linked_works+0x172/0x270 [ 65.223426] ? assign_work+0x196/0x240 [ 65.223455] worker_thread+0x67e/0xe90 [ 65.223484] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 65.223510] ? __pfx_worker_thread+0x10/0x10 [ 65.223540] kthread+0x3c8/0x740 [ 65.223566] ? __pfx_kthread+0x10/0x10 [ 65.223591] ? ret_from_fork+0x79/0x7a0 [ 65.223612] ? lock_release+0xc8/0x290 [ 65.223644] ? __pfx_kthread+0x10/0x10 [ 65.223670] ret_from_fork+0x67a/0x7a0 [ 65.223691] ? __pfx_ret_from_fork+0x10/0x10 [ 65.223710] ? save_fpregs_to_fpstate+0x145/0x270 [ 65.223738] ? __switch_to+0x759/0x1060 [ 65.223766] ? __pfx_kthread+0x10/0x10 [ 65.223793] ret_from_fork_asm+0x1a/0x30 [ 65.223827] [ 65.223834] [ 65.247956] Allocated by task 305: [ 65.248474] kasan_save_stack+0x24/0x50 [ 65.249053] kasan_save_track+0x14/0x30 [ 65.249629] __kasan_slab_alloc+0x59/0x70 [ 65.250228] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 65.250977] __alloc_skb+0x2ab/0x370 [ 65.251528] hci_cmd_sync_alloc+0x34/0x300 [ 65.252148] __hci_cmd_sync_sk+0xf7/0x5c0 [ 65.252772] hci_read_local_version_sync+0x2c/0x170 [ 65.253496] hci_dev_open_sync+0x145c/0x1f60 [ 65.254149] hci_power_on+0xdb/0x5d0 [ 65.254700] process_one_work+0x8e1/0x19c0 [ 65.255318] worker_thread+0x67e/0xe90 [ 65.255893] kthread+0x3c8/0x740 [ 65.256406] ret_from_fork+0x67a/0x7a0 [ 65.256967] ret_from_fork_asm+0x1a/0x30 [ 65.257564] [ 65.257815] Freed by task 314: [ 65.258284] kasan_save_stack+0x24/0x50 [ 65.258868] kasan_save_track+0x14/0x30 [ 65.259442] kasan_save_free_info+0x3a/0x60 [ 65.260072] __kasan_slab_free+0x43/0x70 [ 65.260669] kmem_cache_free+0x26f/0x500 [ 65.261263] kfree_skbmem+0x18a/0x1f0 [ 65.261828] sk_skb_reason_drop+0x10e/0x1b0 [ 65.262449] vhci_read+0x3d5/0x5d0 [ 65.262971] vfs_read+0x1eb/0xc70 [ 65.263482] ksys_read+0x121/0x240 [ 65.263999] do_syscall_64+0xbf/0x430 [ 65.264565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.265306] [ 65.265556] The buggy address belongs to the object at ffff88800de49280 [ 65.265556] which belongs to the cache skbuff_head_cache of size 232 [ 65.267355] The buggy address is located 56 bytes inside of [ 65.267355] freed 232-byte region [ffff88800de49280, ffff88800de49368) [ 65.269075] [ 65.269338] The buggy address belongs to the physical page: [ 65.270155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xde49 [ 65.271278] flags: 0x100000000000000(node=0|zone=1) [ 65.271993] page_type: f5(slab) [ 65.272497] raw: 0100000000000000 ffff8880096c78c0 dead000000000122 0000000000000000 [ 65.273602] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 65.274700] page dumped because: kasan: bad access detected [ 65.275497] [ 65.275751] Memory state around the buggy address: [ 65.276462] ffff88800de49180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.277491] ffff88800de49200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 65.278527] >ffff88800de49280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.279562] ^ [ 65.280307] ffff88800de49300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 65.281345] ffff88800de49380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 65.282376] ================================================================== [ 65.283522] Disabling lock debugging due to kernel taint [ 65.284887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.310419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.313705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.316337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.336361] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.338912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.989251] Bluetooth: hci0: command tx timeout [ 67.053208] Bluetooth: hci1: command tx timeout [ 67.117158] Bluetooth: hci2: command tx timeout [ 67.246170] Bluetooth: hci3: command tx timeout [ 67.310260] Bluetooth: hci7: command tx timeout [ 67.373520] Bluetooth: hci6: command tx timeout [ 67.373938] Bluetooth: hci4: command tx timeout [ 67.437675] Bluetooth: hci5: command tx timeout [ 69.037202] Bluetooth: hci0: command tx timeout [ 69.101159] Bluetooth: hci1: command tx timeout [ 69.166198] Bluetooth: hci2: command tx timeout [ 69.293227] Bluetooth: hci3: command tx timeout [ 69.357150] Bluetooth: hci7: command tx timeout [ 69.422133] Bluetooth: hci4: command tx timeout [ 69.422560] Bluetooth: hci6: command tx timeout [ 69.485228] Bluetooth: hci5: command tx timeout [ 71.085877] Bluetooth: hci0: command tx timeout [ 71.149221] Bluetooth: hci1: command tx timeout [ 71.213167] Bluetooth: hci2: command tx timeout [ 71.342194] Bluetooth: hci3: command tx timeout [ 71.405262] Bluetooth: hci7: command tx timeout [ 71.469465] Bluetooth: hci6: command tx timeout [ 71.470244] Bluetooth: hci4: command tx timeout [ 71.533805] Bluetooth: hci5: command tx timeout [ 73.133265] Bluetooth: hci0: command tx timeout [ 73.197167] Bluetooth: hci1: command tx timeout [ 73.261192] Bluetooth: hci2: command tx timeout [ 73.390778] Bluetooth: hci3: command tx timeout [ 73.453151] Bluetooth: hci7: command tx timeout [ 73.517179] Bluetooth: hci6: command tx timeout [ 73.517198] Bluetooth: hci4: command tx timeout [ 73.582238] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 09:42:44 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801bd97618 R8 =0000000000000000 R9 =ffffed10013fe046 R10=000000000000005b R11=fffffffffffca010 R12=000000000000005b R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0b50480620 CR3=000000001c733000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ff00ff00ff00ff00ff00ffffff00 XMM01=010001000100010001000100010100ff XMM02=61305f315f315f4c53534e45504f0030 XMM03=000000000000000000000000004f0030 XMM04=504f0061305f315f315f4c53534e4550 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81c59794 RDX=ffff888016bf5340 RSI=ffffffff81c597a1 RDI=0000000000000001 RBP=ffff88801f2df928 RSP=ffff88801f2df8b8 R8 =0000000000000000 R9 =ffffed100381e8a4 R10=0000000000000001 R11=0000000000000001 R12=ffff88801c0f4468 R13=ffff8880094c2560 R14=ffffffff8899cc60 R15=ffffffff84f37200 RIP=ffffffff84c7a214 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555831b0400 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0ba0c936f4 CR3=000000000cfda000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7736ce47c000007f7736ce47c8 XMM02=00007f7736ce47e000007f7736ce47c0 XMM03=00007f7736ce47c800007f7736ce47c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000